Splunk Search

question on "local" folder

splunkatl
Path Finder

I am new to Splunk. I have two splunkforward servers, first server is already configured by someone else as splunk forwarder .I am trying to set up second server.
I untar the splunk forward software. I compared all folder and files in both server. I copied one folder "splunkuniversalforwader/etc/apps/Splunkforwader/local" from first to second one. boom everything is working fine.
My question is how is "local" folder get created in first server "splunkuniversalforwader/etc/apps/Splunkforwader?
Do I need run any CLI rather copying from other server?

0 Karma

Damien_Dallimor
Ultra Champion

Local folder is for any updates to configuration files that happen post installation ie: non-default settings.So the Local folder gets created when you make a configuration change ie: enabling an input, creating a field extraction via Splunk web etc...

0 Karma

Ayn
Legend

No, that is for regular app contents only.

0 Karma

Splunk_U
Path Finder

Can I create local folder @ /opt/splunk/share/splunk/search_mrsparkle/exposed/img/skins???

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...