Splunk Enterprise

Splunk forwarder on MacOS

americanadmin
New Member

Trying to install the splunk forwarder credentials is posing an issue on my system. The directions tell me to use a command that has ./splunk as part of the argument but terminal does not recognize that location. Are these credentials supposed to match their cloud component for the same ones that access the instances? The directions are not clear, they simply state to change the default. Also would like to see explicit uninstall commands as well.

Tags (1)
0 Karma
1 Solution

nickhills
Ultra Champion

./splunk is "short-hand" for the splunk executable.
(more accurately $SPLUNK_HOME/bin/splunk)

On Unix, this is by default /opt/splunk/bin/splunk
On Windows it is c:\program files\splunk\bin\splunk
On MacOS it is /Applications/splunk/bin/splunk

If my comment helps, please give it a thumbs up!

View solution in original post

nickhills
Ultra Champion

./splunk is "short-hand" for the splunk executable.
(more accurately $SPLUNK_HOME/bin/splunk)

On Unix, this is by default /opt/splunk/bin/splunk
On Windows it is c:\program files\splunk\bin\splunk
On MacOS it is /Applications/splunk/bin/splunk

If my comment helps, please give it a thumbs up!
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...