Getting Data In

How can I configure the universal forwarder in Docker?

sabche
New Member

Hi guys,

How can I configure the universal forwarder in Docker?

I create the image and container, but in the container, I cant find the .conf files that I need for configuring the universal forwarder. I have Splunk and the forwarder in a docker environment.

thanks

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

If you used the official Splunk Universal forwarder image here: https://hub.docker.com/r/splunk/universalforwarder/ then splunk will be installed to /opt/splunkforwarder and the .conf files will all be in the usual spots under etc. You can either the etcpath as a volume so you can edit it out of the container.

Get Updates on the Splunk Community!

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...

Major Splunk Upgrade – Prepare your Environment for Splunk 10 Now!

Attention App Developers: Test Your Apps with the Splunk 10.0 Beta and Ensure Compatibility Before the ...

Stay Connected: Your Guide to June Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...