Deployment Architecture

Disable lightweight forwarding in 4.1 from command line

tepperso
Engager

I stupidly enabled Lightweight forwarding from the web interface and now I can't get the web interference to load. How can I Disable lightweight forwarding from Linux command line so that I can get things back to normal. I'm using 4.1 so the set server-type no longer works.

Tags (2)
0 Karma
1 Solution

CerielTjuh
Path Finder

In the app.conf file located in your etc\apps\SplunkLightForwarder\local folder adjust the settings to:

[install]
state = disabled

and then restart your Splunk instance, this will do the trick.

splunk disable app SplunkLightForwarder

will do the trick as well

View solution in original post

tepperso
Engager

I finally found the documentation for this feature for v4.1. http://www.splunk.com/base/Documentation/4.1.2/Admin/Enableforwardingandreceiving

./splunk disable app [SplunkForwarder|SplunkLightForwarder] -auth [username]:[password]

CerielTjuh
Path Finder

In the app.conf file located in your etc\apps\SplunkLightForwarder\local folder adjust the settings to:

[install]
state = disabled

and then restart your Splunk instance, this will do the trick.

splunk disable app SplunkLightForwarder

will do the trick as well

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...