Getting Data In

Is there a CLI option to force the answer "no" during universal forwarder startup when asked if I want to change the port number to something else?

jghirard
New Member

I am planning to do a silent install of a Splunk Universal Forwarder (v6.3.0) to several hundred Windows servers. Some servers use the default port 8089 for some other app. When the Splunk service starts, I get the question asking me if I want to change the port number to something else. I don't have an easy way to find out if I have the same available port on all of my servers. I would really just prefer to have the startup of the agent just answer "no" to the question and continue to start the service without user intervention. We don't use the management port for deployments or remote management. Is there some command line switch that I can use to force the answer at startup so it doesn't stop?

0 Karma

somesoni2
Revered Legend

I would suggest to use some different port which may be available on all the forwarder servers, than using the default 8089. You can create a web.conf (after installation is complete and before you're trying to start Splunk service) with following option and then restart Splunk (update the port numbers per your environment)

[settings]
httpport = 98765
mgmtHostPort = 127.0.0.1:12345
0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...