Installation

User permissions for splunk multi-instance installation

dataIngester
Explorer

I know it is possible to have multiple instances of splunk running on the same machine/server.

My question is if there would be a conflict with the $SPLUNK_HOME variable being assigned to the same user "splunk". How can such a configuration be made possible on linux?

I have a Search Head instance installed at /data/splunk/ and the home directory ($SPLUNK_HOME) for the "splunk" user is /data/splunk/bin/.

I need to install a Forwarder on the same machine at /data2/splunkforwarder/ and the user will still be "splunk". 

Will there be no conflict with 2 different home directories being assigned to the same user? Is such an implementation possible?

Labels (2)
0 Karma

manjunathmeti
Champion

For Splunk documentation: https://docs.splunk.com/Documentation/Splunk/8.1.1/Admin/Splunk-launchconf

SPLUNK_HOME = <string>
* The fully qualified path to the Splunk platform instance installation directory.
* The comment in the auto-generated splunk-launch.conf is informational, not
a live setting, and does not need to be uncommented.
* If not set, the Splunk platform automatically determines the location of SPLUNK_HOME
based on the location of the splunk CLI executable.
* Specifically, the parent of the directory containing splunk or splunk.exe

Accroding to this your forwarder home path will be /data2/splunkforwarder/ if splunk executable exist in /data2/splunkforwarder/bin/

So, there will no conflicts of running two instances under the same user.

 

If this reply helps you, an upvote/like would be appreciated.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...

Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Splunk Developer Day announcements: AI agents, MCP tools, Forecasting, and Custom ...

Splunk Developer Day was packed with product and platform updates for developers building in the AI ...