topic VM Splunk / Proxmox / Unifi in Getting Data In https://community.splunk.com/t5/Getting-Data-In/VM-Splunk-Proxmox-Unifi/m-p/689282#M114727 <DIV class=""><DIV><DIV class="">Hello,<BR />I would like my router/firewall Unifi UDM-SE send his logs to my VM (splunk+ubuntu server).<BR />What I have done:<BR /><BR />- on the proxmox VM no FW (during the test)<BR />- on my VM I have two NICs, one for the management (network 205) and one for the remote logging location (splunk - network 203 -same as my udm network).<BR />- on my VM, ufw is running, I have opened port 9997 and port 514 .<BR />- on my UDM SE, I have forwarded the syslog to my remote splunk server (network 203).<BR /><BR />On the Splunk server, port 514 and 9997 are listening.<BR /><BR /><BR />Until now, no logs appear on my Splunk.<BR />How "ufw" is dealing when running two different networks ?</DIV><DIV class="">How to add the second NIC (network 203) to Splunk ?<BR /><BR />Ideas ?</DIV></DIV><DIV class="">&nbsp;</DIV></DIV> Sat, 01 Jun 2024 08:08:25 GMT splunkman-70 2024-06-01T08:08:25Z VM Splunk / Proxmox / Unifi https://community.splunk.com/t5/Getting-Data-In/VM-Splunk-Proxmox-Unifi/m-p/689282#M114727 <DIV class=""><DIV><DIV class="">Hello,<BR />I would like my router/firewall Unifi UDM-SE send his logs to my VM (splunk+ubuntu server).<BR />What I have done:<BR /><BR />- on the proxmox VM no FW (during the test)<BR />- on my VM I have two NICs, one for the management (network 205) and one for the remote logging location (splunk - network 203 -same as my udm network).<BR />- on my VM, ufw is running, I have opened port 9997 and port 514 .<BR />- on my UDM SE, I have forwarded the syslog to my remote splunk server (network 203).<BR /><BR />On the Splunk server, port 514 and 9997 are listening.<BR /><BR /><BR />Until now, no logs appear on my Splunk.<BR />How "ufw" is dealing when running two different networks ?</DIV><DIV class="">How to add the second NIC (network 203) to Splunk ?<BR /><BR />Ideas ?</DIV></DIV><DIV class="">&nbsp;</DIV></DIV> Sat, 01 Jun 2024 08:08:25 GMT https://community.splunk.com/t5/Getting-Data-In/VM-Splunk-Proxmox-Unifi/m-p/689282#M114727 splunkman-70 2024-06-01T08:08:25Z