User permissions for splunk multi-instance installation

dataIngester — Tue, 02 Feb 2021 19:23:31 GMT

I know it is possible to have multiple instances of splunk running on the same machine/server.

My question is if there would be a conflict with the $SPLUNK_HOME variable being assigned to the same user "splunk". How can such a configuration be made possible on linux?

I have a Search Head instance installed at /data/splunk/ and the home directory ($SPLUNK_HOME) for the "splunk" user is /data/splunk/bin/.

I need to install a Forwarder on the same machine at /data2/splunkforwarder/ and the user will still be "splunk".

Will there be no conflict with 2 different home directories being assigned to the same user? Is such an implementation possible?

Re: User permissions for splunk multi-instance installation

manjunathmeti — Wed, 03 Feb 2021 05:25:34 GMT

For Splunk documentation: https://docs.splunk.com/Documentation/Splunk/8.1.1/Admin/Splunk-launchconf

SPLUNK_HOME = <string>
* The fully qualified path to the Splunk platform instance installation directory.
* The comment in the auto-generated splunk-launch.conf is informational, not
a live setting, and does not need to be uncommented.
* If not set, the Splunk platform automatically determines the location of SPLUNK_HOME
based on the location of the splunk CLI executable.
* Specifically, the parent of the directory containing splunk or splunk.exe

Accroding to this your forwarder home path will be /data2/splunkforwarder/ if splunk executable exist in /data2/splunkforwarder/bin/.

So, there will no conflicts of running two instances under the same user.

If this reply helps you, an upvote/like would be appreciated.

topic Re: User permissions for splunk multi-instance installation in Installation

User permissions for splunk multi-instance installation

Re: User permissions for splunk multi-instance installation