topic Re: universal forwarder for domain machines in Getting Data In

universal forwarder for domain machines

engrimranzakir — Wed, 29 Dec 2021 12:38:48 GMT

Hi all,

Is it possible to configure universal forwarder in one machine that collect logs from all other domain machines rather than installing UF on each machines,

Thanks.

Re: universal forwarder for domain machines

richgalloway — Wed, 29 Dec 2021 14:03:39 GMT

Yes, it is possible, but there are considerations. Splunk has a document on the subject. See https://docs.splunk.com/Documentation/Splunk/8.2.3/Data/ConsiderationsfordecidinghowtomonitorWindowsdata

Re: universal forwarder for domain machines

engrimranzakir — Thu, 30 Dec 2021 08:27:23 GMT

Thanks for your reply, Its appreciated.

Can you please share some helping document of System Center Configuration Manager (SCCM) or or a third party distribution solution such as Puppet., the tool used to collect logs .

Re: universal forwarder for domain machines

richgalloway — Thu, 30 Dec 2021 15:37:10 GMT

I do no have such documentation, but I'm sure Google does.