https://community.splunk.com/t5/Getting-Data-In/splunkforwarder/m-p/89567#M18583 <P>Did you try?</P> <PRE><CODE>splunk/etc/bin/splunk add forward-server &lt;host:port&gt; </CODE></PRE> <P>host being your main splunk instance(receiving) and port by default is 9997</P> Wed, 27 Apr 2011 06:23:49 GMT MarioM 2011-04-27T06:23:49Z https://community.splunk.com/t5/Getting-Data-In/splunkforwarder/m-p/89566#M18582 <P>Hello, I just setup a splunk server and have all my windows machines running the splunkforwarder without any problems.<BR /> I have installed the splunkforwarder application onto my client machine (Mac) and can see that a PID is running on port 8089 for this application. I am unsure where to "configure" this application or what file to change/update so it points back to my splunk server with the appropriate listening port. I tried using the "To use the Splunk Web interface, point your browser at: "<A href="http://myserver.local:8000">http://myserver.local:8000</A>" to no avail. Any suggestions would be appreciated. </P> Wed, 27 Apr 2011 04:02:32 GMT https://community.splunk.com/t5/Getting-Data-In/splunkforwarder/m-p/89566#M18582 johnny21 2011-04-27T04:02:32Z https://community.splunk.com/t5/Getting-Data-In/splunkforwarder/m-p/89567#M18583 <P>Did you try?</P> <PRE><CODE>splunk/etc/bin/splunk add forward-server &lt;host:port&gt; </CODE></PRE> <P>host being your main splunk instance(receiving) and port by default is 9997</P> Wed, 27 Apr 2011 06:23:49 GMT https://community.splunk.com/t5/Getting-Data-In/splunkforwarder/m-p/89567#M18583 MarioM 2011-04-27T06:23:49Z