https://community.splunk.com/t5/Installation/Custom-installations/m-p/64220#M1013 <P>Our solution to this was to make our own rpm that is dependent upon the <CODE>splunkforwarder</CODE> RPM. Our RPM ships the appropriate config files to get a forwarder properly configured and talking to a deployment server.</P> <P>Our RPM contains (relative to /opt/splunkforwarder)</P> <PRE><CODE>etc/system/local/user-seed.conf etc/system/local/server.conf etc/system/local/deploymentclient.conf etc/system/local/inputs.conf etc/auth/server.pem etc/auth/cacert.pem </CODE></PRE> <P>There is a postinst script that goes along with it to enable boot-start and start splunk for the first time. </P> <P>The most elegant part of this is that an upgrade to the base Splunk RPM won't replace any of these. I would recommend this approach over trying to spin your own Splunk RPM.</P> Sat, 23 Jul 2011 19:21:55 GMT dwaddle 2011-07-23T19:21:55Z https://community.splunk.com/t5/Installation/Custom-installations/m-p/64219#M1012 <P>Based on the splunk documentation, I'm guessing it's recommended to script customized installation requirements rather than trying to generate a custom RPM. I'd like some feedback on that. If customizing RPM's is doable can you post a spec file for 4.2. I am aware there are spec files for older versions on the net, I'm specifically trying to work with 4.2. TIA.</P> Tue, 22 Mar 2011 04:23:27 GMT https://community.splunk.com/t5/Installation/Custom-installations/m-p/64219#M1012 DTERM 2011-03-22T04:23:27Z https://community.splunk.com/t5/Installation/Custom-installations/m-p/64220#M1013 <P>Our solution to this was to make our own rpm that is dependent upon the <CODE>splunkforwarder</CODE> RPM. Our RPM ships the appropriate config files to get a forwarder properly configured and talking to a deployment server.</P> <P>Our RPM contains (relative to /opt/splunkforwarder)</P> <PRE><CODE>etc/system/local/user-seed.conf etc/system/local/server.conf etc/system/local/deploymentclient.conf etc/system/local/inputs.conf etc/auth/server.pem etc/auth/cacert.pem </CODE></PRE> <P>There is a postinst script that goes along with it to enable boot-start and start splunk for the first time. </P> <P>The most elegant part of this is that an upgrade to the base Splunk RPM won't replace any of these. I would recommend this approach over trying to spin your own Splunk RPM.</P> Sat, 23 Jul 2011 19:21:55 GMT https://community.splunk.com/t5/Installation/Custom-installations/m-p/64220#M1013 dwaddle 2011-07-23T19:21:55Z