Splunk Enterprise

Splunk forwarder on MacOS

americanadmin
New Member

Trying to install the splunk forwarder credentials is posing an issue on my system. The directions tell me to use a command that has ./splunk as part of the argument but terminal does not recognize that location. Are these credentials supposed to match their cloud component for the same ones that access the instances? The directions are not clear, they simply state to change the default. Also would like to see explicit uninstall commands as well.

Tags (1)
0 Karma
1 Solution

nickhills
Ultra Champion

./splunk is "short-hand" for the splunk executable.
(more accurately $SPLUNK_HOME/bin/splunk)

On Unix, this is by default /opt/splunk/bin/splunk
On Windows it is c:\program files\splunk\bin\splunk
On MacOS it is /Applications/splunk/bin/splunk

If my comment helps, please give it a thumbs up!

View solution in original post

nickhills
Ultra Champion

./splunk is "short-hand" for the splunk executable.
(more accurately $SPLUNK_HOME/bin/splunk)

On Unix, this is by default /opt/splunk/bin/splunk
On Windows it is c:\program files\splunk\bin\splunk
On MacOS it is /Applications/splunk/bin/splunk

If my comment helps, please give it a thumbs up!
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...