topic Universal Forwader in Deployment Architecture

Universal Forwader

mezami — Thu, 08 Aug 2019 14:05:50 GMT

I installed UF on Win 10 based on steps shown in Splunk web site.
But after finishing, I can not find this program while it is in list my installed program in control panel.
i tried this many times and no change .
Please let me know what happened and what is the solution .

Re: Universal Forwader

nareshinsvu — Fri, 09 Aug 2019 04:52:06 GMT

Did you follow below steps? Did you install Splunk Enterprise before installing Splunk Universal forwarder?

https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/EnableforwardingonaSplunkEnterpriseinstance

Re: Universal Forwader

mezami — Fri, 09 Aug 2019 16:31:20 GMT

Thanks for your reply.
we have a active Splunk Enterprise and I want to install a Forwarder in efferent system .
Now , I activate receiver on Splunk but it has only port number (not IP add.) .
Would you please tell me how I can make a relationship between Rec. & Forwarder in this case.
Now, as I mentioned before, I can not see the Forwarder that I'd installed.

Best Regards,

Re: Universal Forwader

nareshinsvu — Mon, 12 Aug 2019 01:54:01 GMT

You interpreted this in a wrong way. If it helped accept and/or upvote my reply

1) On your forwarder server, you have to install Splunk enterprise and then forwarder software. And follow the steps mentioned in the Splunk document link from my original reply.

2) Once your forwarder is installed successfully, Navigate to

Settings -> Forwarding and Receiving
-> Configure Forwarding -> Click on New Forwarding Host -> Enter "<Receiver Hostname>:<port which you have configured on Receiver>

Re: Universal Forwader

mezami — Mon, 12 Aug 2019 13:20:50 GMT

Hi nareshinsvu,

I've installed a Splunk Enterprise and I want to install Forwarder on different machine.
I put correct IP add. & port for enterprise when I'm installing Forwarder but after finishing I could not see the on different machine while I can see on list of installing pogrom.
Please let me know it's possible there are on two different machine at same network.

Regards,