Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Re: Manual process of Splunk deployment
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How do I deploy Splunk and SplunkForwarder from zip package instead of msi?
I create a Zip package and trying to run in another machine but I am not able to start it 😞
C:\splunkforwarder\bin>splunk start
Splunk> Take the sh out of IT.
Checking prerequisites...
Checking mgmt port [8090]: open
Checking conf files for typos... Done
All preliminary checks passed.
Starting splunk server daemon (splunkd)... SplunkForwarder: Unable to start the service: The specified service does not exist as an installed service.
I tried to Install service from splunk and standard windows command but I think I am missing something here.
can you guys please help me?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Jangid,
The deployment server only deploys/manages Splunk apps/configs, you will need to use something like a GPO/Puppet, etc, to push the actual software.
This is all detailed in the Splunk docs.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Jangid,
The deployment server only deploys/manages Splunk apps/configs, you will need to use something like a GPO/Puppet, etc, to push the actual software.
This is all detailed in the Splunk docs.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
OK I figure out
You need to run below command first time
splunk enable boot-start
after
splunk start
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My process is very simple, I don't want to push to another server/computer. I just want to use existing pre-configured Splunk forwarder. Something similar to http://wiki.splunk.com/Deploy:Migrating_a_Splunk_Install
Accelerating Observability as Code with the Splunk AI Assistant
Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...
Congratulations to the 2025-2026 SplunkTrust!
