topic Re: Where is splunk installed on Linux? in Deployment Architecture

Where is splunk installed on Linux?

vishal_bandavad — Mon, 17 Nov 2014 22:20:23 GMT

I am trying to create a package for my app. I am using a linux server where splunk is installed. as i got the information from this portal, i open the directory /opt/splunk/etc/apps/framework and execute the command ./splunkdj package App_name. when i execute the command, it asks me Where is Splunk installed (version 5.0 or later is required)? []:

I am confused which path i should give here. I tried using the path $splunk_home$/bin , but no luck. Please suggest

Re: Where is splunk installed on Linux?

aljohnson_splun — Mon, 17 Nov 2014 22:43:26 GMT

Since you said you open /opt/splunk/etc/apps/framework, I assume the path you're looking for is just /opt/splunk. Normally $SPLUNK_HOME is set to the root splunk directory.

You could also try to do

echo $splunk_home

echo $SPLUNK_HOME

to see if those bash variables are acutally set (they are case sensitive).

Re: Where is splunk installed on Linux?

vishal_bandavad — Mon, 17 Nov 2014 22:49:39 GMT

Thanks , i tried with /opt/splunk , but i am getting the message that "/opt/splunk is directory , please give valid path" when i checked with echo $SPLUNK_HOME , i am getting blank response.

Re: Where is splunk installed on Linux?

MuS — Mon, 17 Nov 2014 22:54:49 GMT

Try

/opt/splunk/bin/splunk envvars

To get $SPLUNK_HOME

Re: Where is splunk installed on Linux?

somesoni2 — Mon, 17 Nov 2014 23:51:47 GMT

Go to path /opt/splunk/bin and then execute ./splunk package App_name OR simple just execute /opt/splunk/bin/splunk package App_name

Re: Where is splunk installed on Linux?

skender27 — Wed, 22 Jul 2015 16:06:36 GMT

I resolved it this way (Debian OS):

ls -la
remove the .splunkhome file
run again ./splunkdj setup
insert /opt/splunk when asked where is installed Splunk.

Skender K.

Re: Where is splunk installed on Linux?

bandit — Wed, 08 Jan 2020 19:38:36 GMT

This should identify locations of Splunk Enterprise or Splunk Universal Forwarders. I've only tested on Linux.

# using locate command (very fast if available)
locate --regex "splunk(forwarder)?/var/log/splunk/splunkd.log$" | awk -F "/var" '{print $1}'

# using find command
find / -type f -name "splunkd.log" 2>/dev/null | awk -F "/var" '{print $1}'

Re: Where is splunk installed on Linux?

dkolekar_splunk — Fri, 31 Jan 2020 12:56:36 GMT

You need to to the Home path of the Splunk it is located in /opt/Splunk and you need to execute all the scripts in the /opt/splunk/bin ./splunk package name.
the home path is always referred to /opt/splunk or where ever the splunk is been installed.

Re: Where is splunk installed on Linux?

pandaaji — Mon, 11 Apr 2022 10:02:30 GMT

not working