Installation

enable boot start at install time

Sqig
Path Finder

Hi. We're starting to deploy Splunk Universal Forwarder (currently v 5.0.8) using Puppet rather than a straight RPM-and-post-install-configuration routine.

All works flowlessly except for the fact that we cannot set Splunk to enable boot-start without actually executing a command (obviously, splunk enable boot-start) and also provide the admin credentials -- which we wouldn't really want to store inside the puppet module.

Is there a way we can enable auto-start at installation time? We use the /prefix= option and I wondered if there is a similar option to enable boot-start

Thanks.

grijhwani
Motivator

If you're Puppet savvy anyway, just use puppet to also deploy the init script directly (which is all enable boot-start does).

Or you could unroll and rebuild the rpm to have the post-script do it for you.

I would add that on every new install you will be challenged to accept the licence terms on the first run, so whatever you do part of the installation process is going to be to perform a dummy run if some kind with the "--accept-license" option.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...