https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-define-a-custom-location-for-universal/m-p/252595#M48583 <P>Hi marlog, </P> <P>No, Splunk does not support a custom location for universal forwarder local configs or Splunk logs. <BR /> In fact, to push configurations (and add-ons) to multiple forwarders, you should set up a deployment server to do exactly this. <BR /> The documentation provides very detailed information and instructions about forwarder management using a deployment server: <BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.5.1/Updating/Aboutdeploymentserver">http://docs.splunk.com/Documentation/Splunk/6.5.1/Updating/Aboutdeploymentserver</A></P> <P>Hope this helps. Thanks!<BR /> Hunter</P> Wed, 25 Jan 2017 05:01:38 GMT hunters_splunk 2017-01-25T05:01:38Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-define-a-custom-location-for-universal/m-p/252594#M48582 <P>My Splunk Forwarder is installed on a share, which can be mapped to all the servers in my environment. Therefore, I am wondering if it is possible to use binaries out this common location, but have configs installed elsewhere, locally on each server. If so, I would not need to worry about deploying Splunk Forwarders to all the servers, I will be simply pushing configs as needed.</P> <P>Is it possible to define a custom location for Universal Forwarder local configs (.../etc/system/local)? For example, set this as an ENV variable prior to starting the forwarder, or maybe passing-in this location as an argument, such as:</P> <P>.../splunkforwarder/bin/splunk start -local-conf /my/custom/config/location/etc/system/local</P> <P>And similarly for the logs location?</P> <P>I realize I can probably use symlinks to achieve this. But I was wondering if Splunk supports the ability to define custom config/log paths. </P> Tue, 24 Jan 2017 23:48:58 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-define-a-custom-location-for-universal/m-p/252594#M48582 marlog 2017-01-24T23:48:58Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-define-a-custom-location-for-universal/m-p/252595#M48583 <P>Hi marlog, </P> <P>No, Splunk does not support a custom location for universal forwarder local configs or Splunk logs. <BR /> In fact, to push configurations (and add-ons) to multiple forwarders, you should set up a deployment server to do exactly this. <BR /> The documentation provides very detailed information and instructions about forwarder management using a deployment server: <BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.5.1/Updating/Aboutdeploymentserver">http://docs.splunk.com/Documentation/Splunk/6.5.1/Updating/Aboutdeploymentserver</A></P> <P>Hope this helps. Thanks!<BR /> Hunter</P> Wed, 25 Jan 2017 05:01:38 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-define-a-custom-location-for-universal/m-p/252595#M48583 hunters_splunk 2017-01-25T05:01:38Z