Login as ROOT to the machine that you want to install the Splunk Universal Forwarder.One or more Universal Forwarders least privileged mode does not run on other systems or applications.To learn more about how to add, enable, disable, and troubleshoot least privileged users, see Secure you *nix universal forwarder with a least privileged user.įor the universal forwarder to create a least privileged user at installation, your system must meet the following criteria: If Splunk is unable to install a least privileged user, it will install as a non-root user. To resolve this issue, the universal forwarder installer creates "least privileged" users with capabilities specific to running the universal forwarder. However, a user running the forwarder as a basic non-root user cannot fully manage the forwarder or add-ons. Running the universal forwarder as a root user is not a security best practice. Install the universal forwarder on Linux About the least-privileged user Confirm that the disk partition has enough space to hold the uncompressed volume of the data you plan to index.ĭo not install the universal forwarder over an existing installation of full Splunk Enterprise.If you want the forwarder to run as a specific user, you must create the user manually before you install. The universal forwarder does not create the splunk user on the machine.In this case, to install in a specific directory, either cd to the directory where you want to install the forwarder or place the tar file in that directory before you run the tar command. Some non-GNU versions of tar might not have the -C argument available.When you install the universal forwarder using a tar file: The default installation directory for Splunk Enterprise is /opt/splunk. The universal forwarder installs by default in the /opt/splunkforwarder directory. To install the universal forwarder on a *nix host, follow the directions later in this topic for your specific OS. Installation packages contain logic that checks for software dependencies and install in a predetermined place, depending on your operating system. pkg, etc.)Ī tar file contains only the files needed to install and run the universal forwarder and can be installed wherever you have permissions. On *nix operating systems, the installation comes as a tar file or an installation package (.rpm. The universal forwarder installation packages are available for download from. System image or virtual machine for eventual cloning.This type of deployment best suits these needs: It assumes that you plan to install directly onto the host, rather than use a deployment tool. This topic describes how to install the universal forwarder software on a *nix host, such as Linux, Solaris, or Mac OS X.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |