Splunk Enterprise version 7.1 is no longer supported as of October 31, 2020. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk.
Click here for the latest version.

instance.cfg.conf
The following are the spec and example files for instance.cfg.conf
.
instance.cfg.conf.spec
# Version 7.1.8 # # This file contains the set of attributes and values you can expect to find in # the SPLUNK_HOME/etc/instance.cfg file; the instance.cfg file is not to be # modified or removed by user. LEAVE THE instance.cfg FILE ALONE. # #
GLOBAL SETTINGS
# The [general] stanza defines global settings. #
[general]
guid = <GUID in all-uppercase> * This setting formerly (before 5.0) belonged in the [general] stanza of server.conf file. * Splunk expects that every Splunk instance will have a unique string for this value, independent of all other Splunk instances. By default, Splunk will arrange for this without user intervention. * Currently used by (not exhaustive): * Clustering environments, to identify participating nodes. * Splunk introspective searches (Splunk on Splunk, Deployment Monitor, etc.), to identify forwarders. * At startup, the following happens: * If server.conf has a value of 'guid' AND instance.cfg has no value of 'guid', then the value will be erased from server.conf and moved to instance.cfg file. * If server.conf has a value of 'guid' AND instance.cfg has a value of 'guid' AND these values are the same, the value is erased from server.conf file. * If server.conf has a value of 'guid' AND instance.cfg has a value of 'guid' AND these values are different, startup halts and error is shown. Operator must resolve this error. We recommend erasing the value from server.conf file, and then restarting. * If you are hitting this error while trying to mass-clone Splunk installs, please look into the command 'splunk clone-prep-clear-config'; 'splunk help' has help. * See http://www.ietf.org/rfc/rfc4122.txt for how a GUID (a.k.a. UUID) is constructed. * The standard regexp to match an all-uppercase GUID is "[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}".
instance.cfg.conf.example
# Version 7.1.8 # # This file contains an example SPLUNK_HOME/etc/instance.cfg file; the # instance.cfg file is not to be modified or removed by user. LEAVE THE # instance.cfg FILE ALONE. # [general] guid = B58A86D9-DF3D-4BF8-A426-DB85C231B699
Last modified on 10 June, 2019
PREVIOUS inputs.conf |
NEXT limits.conf |
This documentation applies to the following versions of Splunk® Enterprise: 7.1.8
Feedback submitted, thanks!