User Tools

Site Tools


Sidebar

data:collect:universal_forwarder_install

This is an old revision of the document!


  1. Download
    • RedHat :
      wget https://download.splunk.com/products/splunk/releases/6.2.2/universalforwarder/linux/splunkforwarder-6.2.2-255606-linux-2.6-x86_64.rpm
    • Debian :
      wget http://download.splunk.com/products/splunk/releases/6.2.3/universalforwarder/linux/splunkforwarder-6.2.3-264376-linux-2.6-amd64.deb
  2. Install
    • RedHat :
      rpm -Uvh splunkforwarder-6.2.2-255606-linux-2.6-x86_64.rpm
    • Debian :
      dpkg -i splunkforwarder-6.2.3-264376-linux-2.6-amd64.deb
  3. 자동 부트 걸기 :
    /opt/splunkforwarder/bin/splunk enable boot-start
  4. 스플렁크에서 데이터 받기 셋팅:(주의 경량포워더 쪽 아님)
    /opt/splunk/bin/splunk enable listen 9997
  5. 경량포워더에서 Splunk등록:
    /opt/splunkforwarder/bin/splunk add forward-server $splunk_srv:9997
  6. 포워더 확인:
    /opt/splunkforwarder/bin/splunk list forward-server
  1. 경량 포워더 다시 시작:
    /opt/splunkforwarder/bin/splunk restart
  2. 모니터 등록 :
    /opt/splunkforwarder/bin/splunk add monitor /home/bigdata/ -index $index_name -sourcetype %app%
data/collect/universal_forwarder_install.1432288335.txt.gz · Last modified: 2019/02/25 14:50 (external edit)