topic How to switch between Splunk Universal Fowarders? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-switch-between-Splunk-Universal-Fowarders/m-p/341168#M62884 <P>Hi,</P> <P>We have a production environment and disaster recovery environment, Splunk universal forwarder is installed on both environments. When production system goes down the UF on production system has to be stopped and UF on DR environment has to start and activate the data ingestion to index. Is there any possibility to set up this mechanism? If yes, how to set up or configure this mechanism?</P> <P>Please let me know if any additional details are required.</P> <P>Thank you,</P> <P>Best regards,<BR /> KK.</P> Wed, 18 Apr 2018 16:55:03 GMT kranthik 2018-04-18T16:55:03Z How to switch between Splunk Universal Fowarders? https://community.splunk.com/t5/Getting-Data-In/How-to-switch-between-Splunk-Universal-Fowarders/m-p/341168#M62884 <P>Hi,</P> <P>We have a production environment and disaster recovery environment, Splunk universal forwarder is installed on both environments. When production system goes down the UF on production system has to be stopped and UF on DR environment has to start and activate the data ingestion to index. Is there any possibility to set up this mechanism? If yes, how to set up or configure this mechanism?</P> <P>Please let me know if any additional details are required.</P> <P>Thank you,</P> <P>Best regards,<BR /> KK.</P> Wed, 18 Apr 2018 16:55:03 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-switch-between-Splunk-Universal-Fowarders/m-p/341168#M62884 kranthik 2018-04-18T16:55:03Z Re: How to switch between Splunk Universal Fowarders? https://community.splunk.com/t5/Getting-Data-In/How-to-switch-between-Splunk-Universal-Fowarders/m-p/341169#M62885 <P>Hi!</P> <P>When you say "production system goes down" you mean the server is down and I suppose UF is also down if you enabled automatic start/stop on boot... right? I suppse you used this command to enable it: $SPLUNK_HOME/bin/splunk enable boot-start</P> <P>Then when your disaster recovery environtment goes up, your UF will start automatically.</P> <P>Regards,<BR /> J.</P> Thu, 19 Apr 2018 14:19:36 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-switch-between-Splunk-Universal-Fowarders/m-p/341169#M62885 Javip 2018-04-19T14:19:36Z