Install SPLUNK software and configures SPLUNK to forward data to the SPLUNK receiver. SPLUNK is configured to monitor the /var/log directory.
To enable SPLUNK on a server add this script as a boot script in a server template and re-launch the server.
Prior to installing a SPLUNK forwarder the SPLUNK receiver should be running and the SPLUNKCERT and SPLUNKROOT_CERT credentials setup with the values created during the SPLUNK receiver install.
Revision 1 | Feb 10, 2009
Sprint 8 release
Sign-up for RightScale