topic Re: Enable boot start of Splunk forwarder on oracle Linux 6.x in Getting Data In

Enable boot start of Splunk forwarder on oracle Linux 6.x

shabana_banu — Fri, 14 Jun 2024 10:56:39 GMT

Hi Team,

Please help me whit the steps to enable boot start of Splunk forwarder on oracle Linux 6.x.

Splunk forwarder version- 9.0.8

Splunk version - 9.0.5

Regards,

Shabana

gcusello — Fri, 14 Jun 2024 13:07:38 GMT

anyway the command (running Splunk as root) is

./splunk enable boot-start

to run Splunk as non root user see at

Ciao.

Giuseppe

shabana_banu — Fri, 21 Jun 2024 12:04:05 GMT

Ciao Gcusello ,

Yes, I reviewed these links however these steps did not work on Oracle linux 6.x.

On google I found below steps which I followed & worked on Oracle 6.x.

Let me know in case anything I am missing here however this worked for my system.

----steps-----

1. Create a symbolic link to init.d: Link the Splunk init script to the /etc/init.d/ directory.

sudo ln -s /opt/splunkforwarder/bin/splunk /etc/init.d/splunk

2.Configure Splunk to start at boot using chkconfig: Enable the Splunk service to start on boot.

sudo chkconfig splunk on

3.Verify the setting.

sudo chkconfig --list splunk

You should see an output similar to:

splunk 0:off 1:off 2:on 3:on 4:on 5:on 6:off

4. Manually restart the Splunk service