topic Re: What should sourcename override and connection form filled in for UDP TCP in monitor when add data? in Splunk Enterprise

What should sourcename override and connection form filled in for UDP TCP in monitor when add data?

jliaw — Mon, 02 Jul 2018 09:50:18 GMT

In monitor, using TCP and UDP sourcetype, what should be filled in at source name override and connection form be filled? And how to use the same port or remove the old port ?

Using Splunk llight, Windows10.

Re: What should sourcename override and connection form filled in for UDP TCP in monitor when add data?

manish_singh_77 — Mon, 02 Jul 2018 11:05:42 GMT

Hi Jliaw,

Fyi: pls refer this link: https://docs.splunk.com/Documentation/Splunk/7.1.1/Data/Monitornetworkports

Re: What should sourcename override and connection form filled in for UDP TCP in monitor when add data?

jliaw — Wed, 04 Jul 2018 03:07:12 GMT

Hi Manish. Thanks for your answer. I have read through the suggested web and have difficulty in looking the Splunk bin. Is that only available for Splunk enterprise? I'm using Splunk Light.

Re: What should sourcename override and connection form filled in for UDP TCP in monitor when add data?

manish_singh_77 — Wed, 04 Jul 2018 05:37:56 GMT

Hi jliaw,

It seems Splunk light have "$SPLUNK_HOME/bin/splunk" as per the below mentioned link.

"http://docs.splunk.com/Documentation/SplunkLight/7.1.1/Installation/UpgradeSplunkLight".

If you are using cloud version then you will not have access for the same, check & let me know in case of any queries.

Re: What should sourcename override and connection form filled in for UDP TCP in monitor when add data?

jliaw — Wed, 04 Jul 2018 06:00:12 GMT

Thanks for your answer! I will find out more about Splunk Light free trial Vs Splunk light and Splunk Light free Vs Splunk Enterprise free trial.

Re: What should sourcename override and connection form filled in for UDP TCP in monitor when add data?

manish_singh_77 — Wed, 04 Jul 2018 06:19:41 GMT

Sure, please check and let me know if you have any queries, I will also try to get more detailed information on it.