Configure Splunk Launch explicitly to prevent future clobbering #232
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
This PR is needed because of the changes Splunk introduced in v9.1.0 of the UF, which changed the default username of the Splunk UF installation to
splunkfwd
fromsplunk
. This raised awareness of the fact that we can't rely on Splunk to keep its own internal values consistent, and as such explicitly specifying the user and service name will help prevent these values from being changed in the future.This PR also adds in additional functionality for those who would like to store their indexes in a different location. A use case for this would be if you want to run your indexes on slower SSDs than your main application, you would set SPLUNK_HOME to be on your root FS and then have your
SPLUNK_DB
pointing to your other mounted SSDs like at/data/splunk/db
. This was done as it seemed like the right place to put this type of feature.Added:
Changed: