Getting Data In

Logging, Splunkforwarder, and Diskless Servers

New Member

I've got a bunch of server which boot entirely without local disk. Is there a means to disable splunkforwarder from wanting to write any log files? As they're pushing data to the indexers for retention it would be excellent if possible.

Tags (2)
0 Karma

Path Finder
0 Karma

Ultra Champion

Sorry, I don't have an answer to your question, but could you not use a RAM disk or log to some NAS/SAN/ordinary network share, or even syslog?


0 Karma


I've got the same problem, anybody have an answer for this?

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!