topic Re: Enable receiving on Splunk for use with Universal Forwarder in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Enable-receiving-on-Splunk-for-use-with-Universal-Forwarder/m-p/72347#M14756 <P>8089 is the default management port, which is different from a receiving port. </P> <P>The receiving is set here: <A href="http://docs.splunk.com/Documentation/Splunk/latest/admin/inputsconf">http://docs.splunk.com/Documentation/Splunk/latest/admin/inputsconf</A><BR /> Look for the tcp:// stanza.</P> <P>The management port is set here: <A href="http://docs.splunk.com/Documentation/Splunk/latest/admin/serverconf">http://docs.splunk.com/Documentation/Splunk/latest/admin/serverconf</A><BR /> See the mgmtHostPort key.</P> Sun, 23 Jun 2013 15:08:51 GMT martin_mueller 2013-06-23T15:08:51Z Enable receiving on Splunk for use with Universal Forwarder https://community.splunk.com/t5/Getting-Data-In/Enable-receiving-on-Splunk-for-use-with-Universal-Forwarder/m-p/72346#M14755 <P>Hey,</P> <P>I'm missing something rather basic here. If Splunk is set by default to listen on port 8089, why when running the Universal Forwarder installation is the receiving end's default port set to 9997?<BR /> If someone wouldnt mind explaining to me in detail how to "switch" to that port I'd highly appreciate it.</P> <P>Thanks,<BR /> Gil</P> Sun, 23 Jun 2013 14:55:11 GMT https://community.splunk.com/t5/Getting-Data-In/Enable-receiving-on-Splunk-for-use-with-Universal-Forwarder/m-p/72346#M14755 xcalibur 2013-06-23T14:55:11Z Re: Enable receiving on Splunk for use with Universal Forwarder https://community.splunk.com/t5/Getting-Data-In/Enable-receiving-on-Splunk-for-use-with-Universal-Forwarder/m-p/72347#M14756 <P>8089 is the default management port, which is different from a receiving port. </P> <P>The receiving is set here: <A href="http://docs.splunk.com/Documentation/Splunk/latest/admin/inputsconf">http://docs.splunk.com/Documentation/Splunk/latest/admin/inputsconf</A><BR /> Look for the tcp:// stanza.</P> <P>The management port is set here: <A href="http://docs.splunk.com/Documentation/Splunk/latest/admin/serverconf">http://docs.splunk.com/Documentation/Splunk/latest/admin/serverconf</A><BR /> See the mgmtHostPort key.</P> Sun, 23 Jun 2013 15:08:51 GMT https://community.splunk.com/t5/Getting-Data-In/Enable-receiving-on-Splunk-for-use-with-Universal-Forwarder/m-p/72347#M14756 martin_mueller 2013-06-23T15:08:51Z