Silent Install of UF in Linux Client Machines

anandhalagaras1 — Tue, 26 Nov 2024 15:15:23 GMT

Hi Team,

We are planning to perform a silent installation of the Splunk Universal Forwarder on a Linux client machine. So far, we have created a splunk user on the client machine, downloaded the .tgz forwarder package, and extracted it to the /opt directory.

Currently, the folder /opt/splunkforwarder is created, and its contents are accessible. I have navigated to the /opt/splunkforwarder/bin directory, and now I want to execute a single command to:

Agree to the license without prompts, and
Set the admin username and password.

I found a reference for a similar approach in Windows, where the following command is used:

msiexec.exe /i splunkforwarder_x64.msi AGREETOLICENSE=yes SPLUNKUSERNAME=SplunkAdmin SPLUNKPASSWORD=Ch@ng3d! /quiet

However, I couldn't find a single equivalent command for Linux that accomplishes all these steps together. Could you please provide the exact command to achieve this on Linux?

Re: Silent Install of UF in Linux Client Machines

PaulPanther — Tue, 26 Nov 2024 09:09:29 GMT

To accept the license during the start, execute:

opt/splunkforwarder/splunk start --accept-license --answer-yes

and before you start the forwarder service I suggest to create a user-seed.conf to set the admin password in clear text on the CLI.

user-seed.conf must be stored in /opt/splunkforwarder/etc/system/local/

[user_info]
USERNAME = admin
PASSWORD = YourPassword

another method is to hash the password and add the hash to the user-seed.conf. It is described in the following doc Create secure administrator credentials - Splunk Documentation

topic Re: Silent Install of UF in Linux Client Machines in Getting Data In

Silent Install of UF in Linux Client Machines

Re: Silent Install of UF in Linux Client Machines