How do you restart the windows universal forwarder after a post-install change in the configuration?
C:\Program Files\SplunkUniversalForwarder\bin>splunk.exe restart
SplunkForwarder: Stopping (pid 2032)
Splunk> Take the sh out of IT.
Checking prerequisites...
Checking mgmt port [8089]: open
Checking conf files for typos...
All preliminary checks passed.
Starting splunk server daemon (splunkd)...
SplunkForwarder: Starting (pid 1780)
Done.
C:\Program Files\SplunkUniversalForwarder\bin>splunk.exe restart
SplunkForwarder: Stopping (pid 2032)
Splunk> Take the sh out of IT.
Checking prerequisites...
Checking mgmt port [8089]: open
Checking conf files for typos...
All preliminary checks passed.
Starting splunk server daemon (splunkd)...
SplunkForwarder: Starting (pid 1780)
Done.
Duh! Another approach is to restart the SplunkForwarder service. I didn't see the service because I had the service viewer open when I installed and didn't refresh the view - so I couldn't see the service listed.
Thanks for the quick response.