Splunk Enterprise

Splunk forwarder on MacOS

americanadmin
New Member

Trying to install the splunk forwarder credentials is posing an issue on my system. The directions tell me to use a command that has ./splunk as part of the argument but terminal does not recognize that location. Are these credentials supposed to match their cloud component for the same ones that access the instances? The directions are not clear, they simply state to change the default. Also would like to see explicit uninstall commands as well.

Tags (1)
0 Karma
1 Solution

nickhills
Ultra Champion

./splunk is "short-hand" for the splunk executable.
(more accurately $SPLUNK_HOME/bin/splunk)

On Unix, this is by default /opt/splunk/bin/splunk
On Windows it is c:\program files\splunk\bin\splunk
On MacOS it is /Applications/splunk/bin/splunk

If my comment helps, please give it a thumbs up!

View solution in original post

nickhills
Ultra Champion

./splunk is "short-hand" for the splunk executable.
(more accurately $SPLUNK_HOME/bin/splunk)

On Unix, this is by default /opt/splunk/bin/splunk
On Windows it is c:\program files\splunk\bin\splunk
On MacOS it is /Applications/splunk/bin/splunk

If my comment helps, please give it a thumbs up!
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...