How can i find a directory where i installed splunk in Centos?

[cebo_myeza]

i installed splunk as root in my linux system but now i forgotten the directory where it was installed, is there anyware i can get the information of which directory my splunk was installed.

[bandit]

This should identify locations of Splunk Enterprise or Splunk Universal Forwarders. I've only tested on Linux.

# using locate command (very fast if available)
locate --regex "splunk(forwarder)?/var/log/splunk/splunkd.log$" | awk -F "/var" '{print $1}'

# using find command
find / -type f -name "splunkd.log" 2>/dev/null | awk -F "/var" '{print $1}'

[richgalloway · Accepted solution]

The standard Splunk directory is /opt/splunk. If that's not where yours is then find / -name splunkd should find it.

[cebo_myeza]

thank you for your time it worked.