topic Re: Splunk Forwarder in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Splunk-Forwarder/m-p/77111#M15770 <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Distributedoverview">http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Distributedoverview</A></P> Thu, 23 Feb 2012 09:10:21 GMT gkanapathy 2012-02-23T09:10:21Z Splunk Forwarder https://community.splunk.com/t5/Getting-Data-In/Splunk-Forwarder/m-p/77110#M15769 <P>Hi,</P> <P>I have installed splunk in one server machine and able to get the data but when i try to get the data from remote machine its not working, have installed forwarder in remote machine also.</P> <P>Can you please explain step by step configuration of splunk forwarder in remote machine and also if i install forwarder how will i get the remote machine data on splunk server.</P> <P>Thanks,</P> Thu, 23 Feb 2012 08:02:39 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Forwarder/m-p/77110#M15769 vaibhavbeohar 2012-02-23T08:02:39Z Re: Splunk Forwarder https://community.splunk.com/t5/Getting-Data-In/Splunk-Forwarder/m-p/77111#M15770 <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Distributedoverview">http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Distributedoverview</A></P> Thu, 23 Feb 2012 09:10:21 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Forwarder/m-p/77111#M15770 gkanapathy 2012-02-23T09:10:21Z Re: Splunk Forwarder https://community.splunk.com/t5/Getting-Data-In/Splunk-Forwarder/m-p/77112#M15771 <P>As gkanapathy said... it is in the docs:</P> <P>you need to setup your main instance as receiver (<A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Enableareceiver">Enable Receiver</A>) and the Universal Forwarder to forward the data to this main instance(<A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Setupforwardingandreceiving#Set_up_forwarding_and_receiving:_universal_forwarders"> <BR /> Set up forwarding and receiving: universal forwarders</A>)...</P> Thu, 23 Feb 2012 13:39:04 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Forwarder/m-p/77112#M15771 MarioM 2012-02-23T13:39:04Z