https://community.splunk.com/t5/Getting-Data-In/Fowarder-default-input-location/m-p/106910#M22485 <P>It was in here:</P> <PRE><CODE>SPLUNK_HOME\etc\apps\MsiCreated </CODE></PRE> <P>Thanks!</P> Tue, 24 Jul 2012 16:41:38 GMT lspringer 2012-07-24T16:41:38Z https://community.splunk.com/t5/Getting-Data-In/Fowarder-default-input-location/m-p/106908#M22483 <P>When I install the universal forwarder on a Windows server via the GUI, I have the option to add inputs with check boxes, like Perfmon monitors, Event logs, and folders. However, when I go to: "C:\Program Files\SplunkUniversalForwarder\etc\system\local" I don't see any of those options I've selected previously saved in the configs there. </P> <P>Where are they saved to and what is the best way to change the options I selected at install?</P> Tue, 24 Jul 2012 16:16:17 GMT https://community.splunk.com/t5/Getting-Data-In/Fowarder-default-input-location/m-p/106908#M22483 lspringer 2012-07-24T16:16:17Z https://community.splunk.com/t5/Getting-Data-In/Fowarder-default-input-location/m-p/106909#M22484 <PRE><CODE>SPLUNK_HOME\etc\apps\MsiCreated </CODE></PRE> Tue, 24 Jul 2012 16:30:53 GMT https://community.splunk.com/t5/Getting-Data-In/Fowarder-default-input-location/m-p/106909#M22484 MarioM 2012-07-24T16:30:53Z https://community.splunk.com/t5/Getting-Data-In/Fowarder-default-input-location/m-p/106910#M22485 <P>It was in here:</P> <PRE><CODE>SPLUNK_HOME\etc\apps\MsiCreated </CODE></PRE> <P>Thanks!</P> Tue, 24 Jul 2012 16:41:38 GMT https://community.splunk.com/t5/Getting-Data-In/Fowarder-default-input-location/m-p/106910#M22485 lspringer 2012-07-24T16:41:38Z