

When you do, the forwarder first stops itself, then starts itself again.Īdditionally, you can configure the universal forwarder to start at boot time. If you want to restart the forwarder after you make a configuration change, run this command.If you want to accept the license agreement without reviewing it when you start the forwarder for the first time, run this command.If you want to start the universal forwarder, run this command.If this is your first time starting the forwarder, you may be asked to review and accept a license agreement and create a username and password: Run the following commands to start the universal forwarder at any time.See Change default values in the Admin Manual. It is possible these variables have automatically been set up. Set up environment variables on your machine, which are necessary to run these commands.See the following steps to start the universal forwarder: On *nix systems: From a shell prompt on the host, go to $SPLUNK_HOME/bin, and run this command:.On Windows: Go to %SPLUNK_HOME%\bin and run this command:.To restart the universal forwarder, use the same CLI restart command that you use to restart a full Splunk Enterprise instance: Some configuration changes might require that you restart the forwarder. Also, if you make changes to the universal forwarder, you must start or restart it:
#Upgrade splunk universal forwarder install
After you install the universal forwarder, you must start it.
