How to non-interactively add a Splunk forwarder?

Question

I wish to create a script for setting up forwarding to a splunk server. Here's what I have so far:

./splunk add forward-server SPLUNK-IP-ADDRESS:SPLUNK-PORT

However, it asks for my credentials. How can I non-interactively pass credentials to splunk and setup the forwarder?

score 1 · Accepted Answer · answered Sep 09 '20 at 07:36

1

You can use the splunk login command to pass your credentials to the Splunk server:

./splunk login -auth 'admin:mypassword'
./splunk add forward-server SPLUNK-IP-ADDRESS:SPLUNK-PORT

answered Sep 09 '20 at 07:36

user3207874

of course - doing this means the username and password are in your command history – warren Sep 10 '20 at 16:44

1 Answers1