Is there a way to get the spec file used to generate the Splunk 4.2 rpm?

[DTERM]

Is there a way to get the spec file used to generate the splunk 4.2 RPM? I need to rebuild the RPM such that Splunk init script meets requirements. Thanks in advance.

[jrodman]

netwrkr gave the useful answer.

The thing is the spec files are generated dynamically for each release for each build. This means we dont actually keep them. It also means they're not convenient for third-party use.

My personal recommendation is to use the tar for automation purposes. It will likely be less trouble in the end. You may have strong reasons to feel otherwise, of course.

[jrodman]

We ship a tar of the files for a given platform that comes up and works. In the Universal Forwarder, we don't even create per-machine hostname settings etc. IMO, unpack the tar, change what you need, make new tar to deploy.

[splunker12er]

I need to modify the default installation directory of splunk
From : /opt/splunk To : /data/splunk
where do i change the settings ?

I know using --prefix parameter i can change the installation directory during installation, but still I needed it in a pre-built way.

thanks

[DTERM]

Can you provide more details as to what you mean by "use the tar for automation". How do you mean? TIA.

[netwrkr · Accepted solution]

Try this

rpm --scripts -qp splunk-4.2.rpm

[DTERM]

That is perfect. Thanks so much!!