Almost bizarre that there is no repo available for a product pretending a bussiness product.  ... View more

https://www.rfaircloth.com/2017/03/07/automating-splunk-deployment-redhatcentos-poor-mans-edition/ says: %triggerin -- splunkforwarder /opt/splunkforwarder/bin/splunk enable boot-start --accept-license --answer-yes service splunk stop mkdir -p /opt/splunkforwarder/etc/apps/org_all_deploymentclient/local Did you try this route and find it was no good? I'll build a similar trigger-laden package like this in a heartbeat ! ... View more

wget https://download.splunk.com/products/splunk/releases/6.6.3/linux/splunkforwarder-6.6.3-e21ee54bc796-linux-2.6-x86_64.rpm --2017-10-24 16:44:47-- https://download.splunk.com/products/splunk/releases/6.6.3/linux/splunkforwarder-6.6.3-e21ee54bc796-linux-2.6-x86_64.rpm Resolving download.splunk.com (download.splunk.com)... 13.33.151.73, 13.33.151.8, 13.33.151.155, ... Connecting to download.splunk.com (download.splunk.com)|13.33.151.73|:443... connected. HTTP request sent, awaiting response... 404 Not Found 2017-10-24 16:44:47 ERROR 404: Not Found. ... View more

To reiterate what @martin_mueller said: typically NO path statement takes wildcards typically you'll need a symlink to point to the correct one you're on Enterprise Linux: you'll have the links managed for you when you install the proper package, your JAVA_HOME is just /usr/lib/jvm/jre and it never changes so, simply install -m755 <(echo export JAVA_HOME=/usr/lib/jvm/jre) /etc/profile.d/javahome.sh .. and you're done. Extra credit: add that into the RPM you use to pull in the JRE, but remember that we don't have a yum repo yet so don't link in db-connect as a dependency if you do. (Check out https://answers.splunk.com/answers/33933 for the trivial repo question; it shouldn't be long, now) ... View more