Getting Data In

How can I configure the universal forwarder in Docker?

New Member

Hi guys,

How can I configure the universal forwarder in Docker?

I create the image and container, but in the container, I cant find the .conf files that I need for configuring the universal forwarder. I have Splunk and the forwarder in a docker environment.

thanks

0 Karma

SplunkTrust
SplunkTrust

If you used the official Splunk Universal forwarder image here: https://hub.docker.com/r/splunk/universalforwarder/ then splunk will be installed to /opt/splunkforwarder and the .conf files will all be in the usual spots under etc. You can either the etcpath as a volume so you can edit it out of the container.

Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!