https://community.splunk.com/t5/Deployment-Architecture/Forwarder-Setup-How-do-i-setup-forwarding-of-port-514-on-a-UF/m-p/108716#M4109 <P>i figured it out<BR /> put this in the inputs.conf</P> <P>[udp://:514]<BR /> sourcetype = syslog<BR /> connection_host = dns</P> <P>[tcp://:514]<BR /> sourcetype = syslog<BR /> connection_host = dns</P> Thu, 26 Jul 2012 12:13:42 GMT bluecloud 2012-07-26T12:13:42Z https://community.splunk.com/t5/Deployment-Architecture/Forwarder-Setup-How-do-i-setup-forwarding-of-port-514-on-a-UF/m-p/108715#M4108 <P>I am trying to setup a Syslog Universal Forwarder on a client site which in turns forwards all syslog to my main Splunk Server.</P> <P>I have the forwarder setup correctly as it can collect all local windows data on the server itself and forward that to my server. What do i need to do to setup syslog listening and then forwarding on the Splunk UF ?</P> Thu, 26 Jul 2012 11:47:51 GMT https://community.splunk.com/t5/Deployment-Architecture/Forwarder-Setup-How-do-i-setup-forwarding-of-port-514-on-a-UF/m-p/108715#M4108 bluecloud 2012-07-26T11:47:51Z https://community.splunk.com/t5/Deployment-Architecture/Forwarder-Setup-How-do-i-setup-forwarding-of-port-514-on-a-UF/m-p/108716#M4109 <P>i figured it out<BR /> put this in the inputs.conf</P> <P>[udp://:514]<BR /> sourcetype = syslog<BR /> connection_host = dns</P> <P>[tcp://:514]<BR /> sourcetype = syslog<BR /> connection_host = dns</P> Thu, 26 Jul 2012 12:13:42 GMT https://community.splunk.com/t5/Deployment-Architecture/Forwarder-Setup-How-do-i-setup-forwarding-of-port-514-on-a-UF/m-p/108716#M4109 bluecloud 2012-07-26T12:13:42Z