Getting Data In

Logging, Splunkforwarder, and Diskless Servers

stl
New Member

I've got a bunch of server which boot entirely without local disk. Is there a means to disable splunkforwarder from wanting to write any log files? As they're pushing data to the indexers for retention it would be excellent if possible.

Tags (2)
0 Karma

nterry
Path Finder
0 Karma

kristian_kolb
Ultra Champion

Sorry, I don't have an answer to your question, but could you not use a RAM disk or log to some NAS/SAN/ordinary network share, or even syslog?

/k

0 Karma

josephnoall
Engager

I've got the same problem, anybody have an answer for this?

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!