I know this sounds bad: disable all unneeded services except Splunk and reboot. ... View more

I too have similar problem. where i have deployment server, which is a unix system and deployment client as windows. File permission on unix system for 'rename_app' is drwxrwxrwx . When i deploy the 'rename_app' from unix system, i am getting 'access issue' for 'rename_app' folder. inputs.conf : [script://$SPLUNK_HOME\etc\apps\rename_app\bin\rnminput.bat] interval = 30 disabled = false If the issue is file permission in window, how to set the permission of window folder/file from unix server. Please advise. Thanks! ... View more

hello in the above answer clean all is only mentioned for forwarders. i hope forwarder will not have index data, users. if i am wrong please let me know. ... View more

This can be answered by the commented link Justin has just posted. ... View more

Does anyone have more specific information on where/how to run both the delete and clean commands? I am inexperienced with Splunk and am not sure what a lot of the forum answers are referring to. My end-goal is to remove one of my servers completely from the "Hosts" list. So far all I have done is uninstall the "Universal Splunk Forwarder" from the server I would like removed from Splunk. ... View more

The question isn't about how to configure Splunk to run on port 80, it's about how to configure the OS so that the Splunk user is allowed to bind to that port. By default, port 80 is in the 'restricted' list of ports, so only the root user, and possibly other privileged users are allowed access it. The restricted ports are 1024 and lower ... View more