topic Add new servers in Deployment Architecture

Add new servers

chigueral — Mon, 02 Sep 2013 23:09:08 GMT

Hi:

How can I add a new server to splunk, I have 20 new servers and I need to this servers send the informaiton like, windows logs, systems, security, etc...

Re: Add new servers

rturk — Mon, 02 Sep 2013 23:22:05 GMT

Hi Chigueral,

Sounds like you're new to Splunk. If you haven't done so already, I would highly recommend going through the online Splunk tutorial to get a grounding about Splunk and what it does.

Splunk Tutorial: http://docs.splunk.com/Documentation/Splunk/latest/Tutorial/WelcometotheSplunktutorial

After that, spend some time with the documentation. It's written well and will help you get your data on board. If you think you have a fairly good grasp of Splunk, the following link will help you get different types of data in:

Splunk Doco: Get Data In: http://docs.splunk.com/Documentation/Splunk/latest/Data/WhatSplunkcanmonitor
Splunk Doco: Introducing the Universal Forwarder: http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Introducingtheuniversalforwarder

I hope this helps 🙂

Re: Add new servers

alanfinlay — Tue, 03 Sep 2013 02:18:01 GMT

Hi Chigueral,

It sounds like someone else setup Splunk to monitor windows servers (using windows app), and you need to add new servers. See the windows app documentation [http://apps.splunk.com], you can use WMI (remote access) or a forwarder on each server, so you need to find out which approach is being used.