Getting Data In

How can I configure the universal forwarder in Docker?

sabche
New Member

Hi guys,

How can I configure the universal forwarder in Docker?

I create the image and container, but in the container, I cant find the .conf files that I need for configuring the universal forwarder. I have Splunk and the forwarder in a docker environment.

thanks

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

If you used the official Splunk Universal forwarder image here: https://hub.docker.com/r/splunk/universalforwarder/ then splunk will be installed to /opt/splunkforwarder and the .conf files will all be in the usual spots under etc. You can either the etcpath as a volume so you can edit it out of the container.

Get Updates on the Splunk Community!

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...

The Visibility Gap: Hybrid Networks and IT Services

The most forward thinking enterprises among us see their network as much more than infrastructure – it's their ...

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...