https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31979#M5627 <P>The main logging config file resides at $SPLUNK_HOME/etc/log.cfg</P> <P>Further details can be found here : <A href="http://docs.splunk.com/Documentation/Splunk/5.0/Troubleshooting/WhatSplunklogsaboutitself">http://docs.splunk.com/Documentation/Splunk/5.0/Troubleshooting/WhatSplunklogsaboutitself</A></P> Tue, 13 Nov 2012 10:02:56 GMT Damien_Dallimor 2012-11-13T10:02:56Z https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31978#M5626 <P>Hi</P> <P>Anyone know how to change the default log location of splunk logs in splunk indexer and universal forwarder please?</P> <P>At the moment splunk indexer and forwarder is writing under /opt I want to move it to /var</P> <P>Thanks</P> Tue, 13 Nov 2012 09:57:04 GMT https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31978#M5626 splunker_123 2012-11-13T09:57:04Z https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31979#M5627 <P>The main logging config file resides at $SPLUNK_HOME/etc/log.cfg</P> <P>Further details can be found here : <A href="http://docs.splunk.com/Documentation/Splunk/5.0/Troubleshooting/WhatSplunklogsaboutitself">http://docs.splunk.com/Documentation/Splunk/5.0/Troubleshooting/WhatSplunklogsaboutitself</A></P> Tue, 13 Nov 2012 10:02:56 GMT https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31979#M5627 Damien_Dallimor 2012-11-13T10:02:56Z https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31980#M5628 <P>Thanks for that.....I had a look at the file and I believe I can change the path directly</P> Tue, 13 Nov 2012 10:36:00 GMT https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31980#M5628 splunker_123 2012-11-13T10:36:00Z https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31981#M5629 <P>Great , if this works for you then please accept the answer <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 13 Nov 2012 23:22:53 GMT https://community.splunk.com/t5/Getting-Data-In/Logging-in-splunk/m-p/31981#M5629 Damien_Dallimor 2012-11-13T23:22:53Z