All Apps and Add-ons
Highlighted

How do I install it in Universal Forwarder?

Explorer

I have machines that has only the Universal Forwarder installed. How to I install and configure Splunk for *nix to run on these machines and forward data to the Indexer?

0 Karma
Highlighted

Re: How do I install it in Universal Forwarder?

SplunkTrust
SplunkTrust

You can install the app simply by exploding the .tar.gz into $SPLUNK_HOME/etc/apps. To configure it, you will need to update some local config files to enable the various inputs.

The easiest way to configure might be to install an lightweight forwarder with Splunk for *nix, go through the configuration panels there, and then use the updated app with configuration files to deploy to your Universal forwarders.

View solution in original post

Highlighted

Re: How do I install it in Universal Forwarder?

Explorer

Do I make a directory copy of $SPLUNKHOME/etc/apps to the Universal Forwarder's $SPLUNKHOME/etc/apps?

I am thinking of using and configuring a test machine as you suggested.

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.