- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi folks,
I'd like to know in which config file I can locate the flags from my universal forwarder.
I mean the flags like these:
SERVICESTARTTYPE=auto and LAUNCHSPLUNK=1
Thanks in advance,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![richgalloway richgalloway](https://community.splunk.com/legacyfs/online/avatars/140500.jpg)
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
Those flags do not go in any config file. They're command-line flags used with the Universal Forwarder installer.
msiexec.exe /i splunkuniversalforwarder_x86.msi DEPLOYMENT_SERVER="deploymentserver1:8089" AGREETOLICENSE=Yes SERVICESTARTTYPE=auto LAUNCHSPLUNK=1 /quiet
FWIW, the flags mentioned default to "auto" and "1", respectively, so they don't need to be specified.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Very interesting information. I appreciate it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![richgalloway richgalloway](https://community.splunk.com/legacyfs/online/avatars/140500.jpg)
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
Those flags do not go in any config file. They're command-line flags used with the Universal Forwarder installer.
msiexec.exe /i splunkuniversalforwarder_x86.msi DEPLOYMENT_SERVER="deploymentserver1:8089" AGREETOLICENSE=Yes SERVICESTARTTYPE=auto LAUNCHSPLUNK=1 /quiet
FWIW, the flags mentioned default to "auto" and "1", respectively, so they don't need to be specified.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@Anonymous Just a quick question: Can those flags be modified after the UF installation? Or how can I verify the current options of those flags?
Thanks in advance,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![richgalloway richgalloway](https://community.splunk.com/legacyfs/online/avatars/140500.jpg)
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
The LAUNCHSPLUNK flag tells the installer to start Splunk immediately after installation. After that the flag doesn't apply so there's nothing to change.
The SERVICESTARTTYPE flag can be changed in the Windows Services app. Open the app then scroll down to SplunkForwarderService. Right-click on it and select Properties. Then change the "Startup type" setting to the desired value.
The AGREETOLICENSE flag cannot be changed.
The INSTALLDIR flag can be changed only by re-installing the UF.
CLONEPREP, GENRANDOMPASSWORD, and SET_ADMIN_USER apply only at installation time.
Other flags can be changed via config files.
If this reply helps you, Karma would be appreciated.
![](/skins/images/89D5ADE867CBAF0B5A525B7E23D83D7E/responsive_peak/images/icon_anonymous_message.png)