https://community.splunk.com/t5/Getting-Data-In/heavy-forwarder-configuration-path/m-p/71548#M14562 <P>Which is the path where the configuration for heavy forwarder needs to be stored. whether it is the usual path $SPLUNK_HOME/etc/system/local or is it a different path</P> Fri, 22 Mar 2013 14:04:27 GMT sansri7680 2013-03-22T14:04:27Z https://community.splunk.com/t5/Getting-Data-In/heavy-forwarder-configuration-path/m-p/71548#M14562 <P>Which is the path where the configuration for heavy forwarder needs to be stored. whether it is the usual path $SPLUNK_HOME/etc/system/local or is it a different path</P> Fri, 22 Mar 2013 14:04:27 GMT https://community.splunk.com/t5/Getting-Data-In/heavy-forwarder-configuration-path/m-p/71548#M14562 sansri7680 2013-03-22T14:04:27Z https://community.splunk.com/t5/Getting-Data-In/heavy-forwarder-configuration-path/m-p/71549#M14563 <P>If you put stuff (config-files) in $SPLINK_HOME/etc/system/local, that should most likely work fine. </P> <P>However, you need to figure out which settings go where in a distributed setup - depending on which phase occurs where. There are some settings related to the Input Phase, others that only have meaning in the Parsing Phase, etc etc. </P> <P>This page may prove beneficial:</P> <P><A href="http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings">http://wiki.splunk.com/Where_do_I_configure_my_Splunk_settings</A></P> <P>/Kristian</P> Fri, 22 Mar 2013 14:14:20 GMT https://community.splunk.com/t5/Getting-Data-In/heavy-forwarder-configuration-path/m-p/71549#M14563 kristian_kolb 2013-03-22T14:14:20Z https://community.splunk.com/t5/Getting-Data-In/heavy-forwarder-configuration-path/m-p/71550#M14564 <P>can you give me an example configuration for receiving a light forwarder data by a heavy forwarder and forwarding it to an indexer</P> Mon, 25 Mar 2013 11:33:16 GMT https://community.splunk.com/t5/Getting-Data-In/heavy-forwarder-configuration-path/m-p/71550#M14564 sansri7680 2013-03-25T11:33:16Z