Deployment Architecture

How to move universal forwader from one hard drive to another in Splunk environment?

santhu559
New Member

Hi All,

Can some one help me how i need to move universal forwarder from C drive to my E drive without effecting in Splunk environment?

Thanks
santhosh

0 Karma

ansif
Motivator

Try upgrading forwarders with custom location. But you should backup existing apps and configuration and then move to new location.

0 Karma

santhu559
New Member

Hi Ansif,

Thanks a lot for your responses here..!!

Can you please more specific on custom location means my deployment client? , apologies i didn't get it. Can you please provide more details here.

Thanks one again for your responses.

Have a nice day..!!!

K santhosh

0 Karma

ansif
Motivator

Just try upgrading forwarder in one of the server and choose custom installation to include your new path.I haven't tried this but I hope this works for you. (sorry that I don't have win test server to perform this by myself)

Once installation done copy conf and app to new location.Please let me know if it is working.

NB:- There is always a small disruption in the data collection when you do this.

0 Karma

ansif
Motivator

I will get a windows test machine, let me check and confirm.

0 Karma

ansif
Motivator

I tested, the second installation is not allowing us to select custom location for new path.So upgrade not working 😞

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...