Getting Data In
Highlighted

When trying to Install a Splunk forwarder on Linux, why am I getting the following error: 'splunk: command not found'

Engager

I am trying to install the Splunk forwarder (for Splunk Cloud) on an Ubuntu 16.04 server using the instructions on the following:

https://docs.splunk.com/Documentation/SplunkCloud/7.2.3/User/ForwardDataToSplunkCloudFromLinux

Everything seems to go well until I get to Step 3: Download and install the universal forwarder credentials. When I type in the command to install the .spl file, I keep getting the 'splunk: command not found' error message.

Does anybody know why I this is happening?

0 Karma
Highlighted

Re: When trying to Install a Splunk forwarder on Linux, why am I getting the following error: 'splunk: command not found'

Engager

Please disregard. I think I found the answer to my question after more digging. The doc states to issue the command 'splunk install app -auth :' to install the forwarder credentials.

I found that I needed to enter the command './splunk......' instead.

View solution in original post

0 Karma
Highlighted

Re: When trying to Install a Splunk forwarder on Linux, why am I getting the following error: 'splunk: command not found'

If you don't want to write './splunk' and use 'splunk' instead, execute this in your bin directory ->
source setSplunkEnv

You will get this as output->
Tab-completion of "splunk " is available.

Now, you can use 'splunk'.

0 Karma