https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193496#M19909 <P>Thank you for your suggest.</P> <P>Can you preview or keep me some document please</P> <P>thank you</P> Mon, 25 Aug 2014 09:14:49 GMT tumdev 2014-08-25T09:14:49Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193494#M19907 <P>Hello</P> <P>I have have 1 Linux Server (Ubuntu) and 1 Splunk Instance (CentOS).</P> <P>I need to see performance of Linux Server with Splunk App for Unix and Linux. But my customer doesn't want to me install a universal forwarder on his server.</P> <P>How can Splunk get logs from Linux Server without installing a Universal Forwarder?</P> <P>sorry for my english <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> </P> <P>Thank you for advance</P> Mon, 25 Aug 2014 08:52:10 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193494#M19907 tumdev 2014-08-25T08:52:10Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193495#M19908 <P>Hi tumdev,</P> <P>you could use syslog to forward the Ubuntu logs to the Splunk indexer or mount the Ubuntu's <CODE>/var/log</CODE> on the Splunk indexer and read the logs this way. <BR /> To get the performance data, some script must be run on the Ubuntu server that writes those figures into either syslog or a log file in <CODE>/var/log</CODE>.</P> <P>hope this helps to get you started ...</P> <P>cheers, MuS</P> Mon, 25 Aug 2014 08:58:57 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193495#M19908 MuS 2014-08-25T08:58:57Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193496#M19909 <P>Thank you for your suggest.</P> <P>Can you preview or keep me some document please</P> <P>thank you</P> Mon, 25 Aug 2014 09:14:49 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193496#M19909 tumdev 2014-08-25T09:14:49Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193497#M19910 <P>You're pretty much on your own - Splunk's way of grabbing this data IS via forwarders. If your customer don't want forwarders, there's no ready-made alternate solution. You should be spending your time explaining this to your customer instead.</P> Mon, 25 Aug 2014 09:25:17 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193497#M19910 Ayn 2014-08-25T09:25:17Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193498#M19911 <P><A href="http://docs.splunk.com/Documentation/Splunk/6.1.3/Data/SyslogUDP">http://docs.splunk.com/Documentation/Splunk/6.1.3/Data/SyslogUDP</A></P> Mon, 25 Aug 2014 10:45:55 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193498#M19911 sunrise 2014-08-25T10:45:55Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193499#M19912 <P>Thank you, Mus <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 25 Aug 2014 15:51:15 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193499#M19912 tumdev 2014-08-25T15:51:15Z https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193500#M19913 <P>I suggest that if you are going to use syslog you make it syslog over TCP (by default it is UDP), and that you use (Balabit's) syslog-ng as your syslog server - it is way more configurable than the default rsyslogd.</P> Mon, 25 Aug 2014 18:33:42 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/How-to-get-data-into-Splunk-from-Ubuntu-Linux-server-without-a/m-p/193500#M19913 grijhwani 2014-08-25T18:33:42Z