Splunk Universal Forwarder - Linux Installation

[trevorharris]

Hello, I read through the Universal Forwarder installation docs for the latest version of Splunk Universal Forwarder.

After following the instructions to install via dpkg -i <package.deb>, and then proceeding to run the Splunk Start command, I am prompted to enter administrator credentials for a splunk UF administrator user.

I could not find any information about this 'administrator' user in the documentation. We are trying to script the installation of the universal forwarders and this has created a roadblock for us.

Any help is appreciated!

[livehybrid]

Hi @trevorharris 

Check out Deploying "user-seed.conf" in Universal Fowarders using Deployment Server and https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.2/configuration-file-referen... for more information on user-seed.conf which will allow you to set a user/pass at installation time.

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[richgalloway]

The admin credentials are used for certain CLI commands.  You should be able to start Splunk without admin creds, but that means the CLI commands that require them will not work.  It's pretty rare to need to use those commands on a UF.