https://community.splunk.com/t5/Getting-Data-In/How-Can-I-Get-My-Splunk-Container-to-Monitor-its-Host/m-p/643427#M109626 <P>Since a container has no awareness of its host, you'll need a UF on the host itself.&nbsp; The UF does not use port 9997 so that's not an issue.&nbsp; You can reassign port 8089 to another port in web.conf or disable it entirely in server.conf.</P> Mon, 15 May 2023 16:59:40 GMT richgalloway 2023-05-15T16:59:40Z https://community.splunk.com/t5/Getting-Data-In/How-Can-I-Get-My-Splunk-Container-to-Monitor-its-Host/m-p/643408#M109624 <P>Hello all!</P> <P>&nbsp; &nbsp;I am unable to ingest log data from the host on which my docker container resides.&nbsp; Since it is a container I do not have access to the host logs.&nbsp; I also tried installing a universal forwarder on the host, but since the ports 8089 and 9997 are already bound to the container that does not work.&nbsp; I would appreciate any suggestions.</P> <P>&nbsp;</P> <P>Regards,</P> <P>Virgil</P> Mon, 15 May 2023 15:15:12 GMT https://community.splunk.com/t5/Getting-Data-In/How-Can-I-Get-My-Splunk-Container-to-Monitor-its-Host/m-p/643408#M109624 VCorralPlex21 2023-05-15T15:15:12Z https://community.splunk.com/t5/Getting-Data-In/How-Can-I-Get-My-Splunk-Container-to-Monitor-its-Host/m-p/643427#M109626 <P>Since a container has no awareness of its host, you'll need a UF on the host itself.&nbsp; The UF does not use port 9997 so that's not an issue.&nbsp; You can reassign port 8089 to another port in web.conf or disable it entirely in server.conf.</P> Mon, 15 May 2023 16:59:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-Can-I-Get-My-Splunk-Container-to-Monitor-its-Host/m-p/643427#M109626 richgalloway 2023-05-15T16:59:40Z