All Apps and Add-ons

Rename splunk installation directory



I was wondering if it was possible to rename splunk installation directory.
I have several splunk instances named like that




In order to automate the install process I would like to rename all those path by : /opt/splunk/splunk/


Could you please tell me if it is possible and how to do so without breaking everything ?




Labels (2)
0 Karma

Esteemed Legend

Hi @cubeeu,

you have to set the $SPLUNK_HOME environment variable that you can find in $SPLUNK_HOME/etc/splunk-launch.conf.

in other words:

  • stop Splunk on the server,
  • change $SPLUNK_HOME in splunk-launch.conf,
  • rename the Splunk folder,
  • restart Splunk.



0 Karma

If you are using systemd to start splunk instances you must also update those unit files to point to the correct binary.
f you haven't updated those manually then just disable + enable boot start as normally to update those.
And if not use systemd then you must do it for init.d version of startup scripts.
r. Ismo
0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...