I'm trying to install Splunk on a Linux server in Amazon Web Services (AWS) and I would like to have the log location be on an NFS-mounted drive (Elastic File System or EFS in AWS). This will allow me to use an NFS drive that automatically expands/contracts with the amount of logs that I am consuming. This is for the logs that are sent to Splunk and not the local logs that Splunk generates.
Is there a way to designate a specific directory for logs during install? If not, is there a way I can mount the NFS/EFS directory over a specific directory and do I need to copy any specific files (defaultdb?) over?