https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Log-DIR/m-p/73939#M15126 <P>Is it possible to configure the log directory of a Windows 4.2 unviversal fowarder?</P> <P>i.e. we want to log to a directory which is not C:/Program Files/Splunk/var/log/splunk to meet our environment policies.</P> Mon, 04 Apr 2011 16:59:21 GMT Josh 2011-04-04T16:59:21Z https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Log-DIR/m-p/73939#M15126 <P>Is it possible to configure the log directory of a Windows 4.2 unviversal fowarder?</P> <P>i.e. we want to log to a directory which is not C:/Program Files/Splunk/var/log/splunk to meet our environment policies.</P> Mon, 04 Apr 2011 16:59:21 GMT https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Log-DIR/m-p/73939#M15126 Josh 2011-04-04T16:59:21Z https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Log-DIR/m-p/73940#M15127 <P>Hi Josh,</P> <P>You may want to create a log-local.cfg file in $SPLUNK_HOME/etc/ which includes a custom path for the following log configuration setting:</P> <PRE><CODE>appender.A1.fileName=/path/to/your/custom/file.log </CODE></PRE> <P>For more information, the following documentation link has some useful configuration settings for your log files.</P> <P><A href="http://www.splunk.com/base/Documentation/4.2/Admin/SplunkLogFiles#log.cfg" rel="nofollow">http://www.splunk.com/base/Documentation/4.2/Admin/SplunkLogFiles#log.cfg</A></P> Mon, 04 Apr 2011 17:17:15 GMT https://community.splunk.com/t5/Getting-Data-In/Universal-Forwarder-Log-DIR/m-p/73940#M15127 Rob 2011-04-04T17:17:15Z