Hello, I have a server which I no longer want included in my Splunk Search. The context for this is AWS where we are bringing up new servers and decommission existing servers in a blue/green deployment style. We would like to execute a script on the servers to be decommissioned so that they no longer participate in our Splunk configuration. Here are the commands I use to add a server to our Splunk configuration: /opt/splunkforwarder/bin/splunk start --accept-license --answer-yes --no-prompt /opt/splunkforwarder/bin/splunk install app packages/splunkclouduf.spl -auth admin:$SPLUNK_PASSWORD /opt/splunkforwarder/bin/splunk set deploy-poll input-prd-p-qhc9rkr77cz2.cloud.splunk.com:8089 /opt/splunkforwarder/bin/splunk restart /opt/splunkforwarder/bin/splunk enable boot-start What are the commands to remove the server from our Splunk configuration? Is it as simple as: /opt/splunkforwarder/bin/splunk stop ... View more

Hello, I have a Splunk Lite Cloud license and I have installed Forwarders on all machines. I have forgotten which files and directories I configured them with initially. I need to review and edit the forwarder configuration and the sources it scans, but I do not see a way to do it. Thanks in advance. ... View more