Hi, please can you advise how do I install Splunk universal forwarder manually to /opt/splunkforwarder?
It's says: /opt/splunkforwarder is default on page:
http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Deployanixdfmanually
However in the install page it says:
To install Splunk on a Linux system, expand the tarball into an appropriate directory using the tar command:
tar xvzf splunk_package_name.tgz
The default install directory is splunk in the current working directory. To install into /opt/splunk, use the following command:
tar xvzf splunk_package_name.tgz -C /opt
Please can you help / advise?
I was unaware of two different tar files - one for forwarder and one for GUI
If you want to manually install it to /opt/splunkforwarder, you can just do this (don't start splunk until after mv):
tar xvzf splunk_package_name.tgz -C /opt
mv /opt/splunk /opt/splunkforwarder
No, that is an environment variable Splunk sets up itself.
Many thanks, do I need to set the $SPLUNK_HOME in my linux profile?