Getting Data In

Is there a CLI option to force the answer "no" during universal forwarder startup when asked if I want to change the port number to something else?

jghirard
New Member

I am planning to do a silent install of a Splunk Universal Forwarder (v6.3.0) to several hundred Windows servers. Some servers use the default port 8089 for some other app. When the Splunk service starts, I get the question asking me if I want to change the port number to something else. I don't have an easy way to find out if I have the same available port on all of my servers. I would really just prefer to have the startup of the agent just answer "no" to the question and continue to start the service without user intervention. We don't use the management port for deployments or remote management. Is there some command line switch that I can use to force the answer at startup so it doesn't stop?

0 Karma

somesoni2
Revered Legend

I would suggest to use some different port which may be available on all the forwarder servers, than using the default 8089. You can create a web.conf (after installation is complete and before you're trying to start Splunk service) with following option and then restart Splunk (update the port numbers per your environment)

[settings]
httpport = 98765
mgmtHostPort = 127.0.0.1:12345
0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...