How can I configure the universal forwarder in Docker?

[sabche]

Hi guys,

How can I configure the universal forwarder in Docker?

I create the image and container, but in the container, I cant find the .conf files that I need for configuring the universal forwarder. I have Splunk and the forwarder in a docker environment.

thanks

[chrisyounger]

If you used the official Splunk Universal forwarder image here: https://hub.docker.com/r/splunk/universalforwarder/ then splunk will be installed to /opt/splunkforwarder and the .conf files will all be in the usual spots under etc. You can either the etcpath as a volume so you can edit it out of the container.