I've been getting this error:
./splunk add monitor /var/log/*log
ERROR: Couldn't determine $SPLUNK_HOME or $SPLUNK_ETC; perhaps one should be set in environment
I have the ff structure for reference:
/opt/splunk/bin(no splunk executable file)
/opt/splunkforwarder/splunk.exe
Add SPLUNK_HOME = /opt/splunkforwarder
to your bashrc file.
Hey jcal,
Take a look at this article and see if that helps: