topic Best way to deploy new limits.conf on Windows universal forwarder? in Getting Data In

Best way to deploy new limits.conf on Windows universal forwarder?

Ulfb — Wed, 06 Aug 2014 12:56:08 GMT

Hi,

We have Splunk 6 with Deployment server.

I'm trying to understand how to best deploy limits.conf with an app.

I note that when Splunk Uni Fwd are deployed to an windows host it's get here:

C:\Program Files\SplunkUniversalForwarder\bin>splunk  cmd btool limits list thruput --debug
C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\limits.conf [thruput]
C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\limits.conf maxKBps = 256

An app won't override this, so do I need to delete "C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\default\limits.conf" to be able to use an deployable app ?

How do others solve this ?

Re: Best way to deploy new limits.conf on Windows universal forwarder?

aaronkorn — Wed, 06 Aug 2014 13:13:29 GMT

limits.conf requires a restart for the changes to take hold http://docs.splunk.com/Documentation/Splunk/6.1.2/Admin/limitsconf

If you place limits.conf in the local directory of any deployment app and have restartSplunkd = true for your particular serverclass in serverclass.conf you should be set.

Re: Best way to deploy new limits.conf on Windows universal forwarder?

gkanapathy — Thu, 07 Aug 2014 04:13:36 GMT

An app will override this just fine. Settings in any "local" conf folder will override settings in any "default" folder.

Re: Best way to deploy new limits.conf on Windows universal forwarder?

Ulfb — Thu, 07 Aug 2014 12:50:37 GMT

Thanks.

It working using an lover Letter as app name.