Getting Data In

Is there a CLI option to force the answer "no" during universal forwarder startup when asked if I want to change the port number to something else?

New Member

I am planning to do a silent install of a Splunk Universal Forwarder (v6.3.0) to several hundred Windows servers. Some servers use the default port 8089 for some other app. When the Splunk service starts, I get the question asking me if I want to change the port number to something else. I don't have an easy way to find out if I have the same available port on all of my servers. I would really just prefer to have the startup of the agent just answer "no" to the question and continue to start the service without user intervention. We don't use the management port for deployments or remote management. Is there some command line switch that I can use to force the answer at startup so it doesn't stop?

0 Karma

SplunkTrust
SplunkTrust

I would suggest to use some different port which may be available on all the forwarder servers, than using the default 8089. You can create a web.conf (after installation is complete and before you're trying to start Splunk service) with following option and then restart Splunk (update the port numbers per your environment)

[settings]
httpport = 98765
mgmtHostPort = 127.0.0.1:12345
0 Karma