Generally for server based configurations changes for server such as minFreeSpace can be done in
/opt/splunk/etc/system/local/server.conf.
How to do this 1 simple change when it is built by ansible and is stateless. meaning it will get wiped out again.
even doing a DockerFile copy server.conf to /opt/splunk/etc/system/local/server.conf is wiped out by
ansible command in entrypoint.sh
↧