Splunk Search

configuring splunk to start at boot time config file

aaronkorn
Splunk Employee
Splunk Employee

Is there a .conf file in splunk where you can configure splunk to start at boot time?

aholzer
Motivator

I don't believe it's a change in a splunk .conf file. When you run the CLI that several people mentioned below, it will make an entry into /etc/init.d I believe. That's where you'd have to check, but you can't roll something out via the deployment server to that location.

You may want to write a script that takes a list of hosts and runs the CLI on each host.

0 Karma

gfuente
Motivator

Hello

You can run this command from the splunk/bin folder:

./splunk enable boot-start -user splunk 

Or any other user you want splunk start with

Regards

0 Karma

aaronkorn
Splunk Employee
Splunk Employee

Hello, I know there is a CLI command for it but we forgot to do this on a couple UF and would like to do a mass config change. We are just looking for a particular flag in a .conf file to set and push out.

0 Karma

phoffman_splunk
Splunk Employee
Splunk Employee
0 Karma

martin_mueller
SplunkTrust
SplunkTrust
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...