https://community.splunk.com/t5/Getting-Data-In/Remote-Authentication-Forwarder-not-sending-from-internet-to-PC/m-p/92240#M19169 <P>Hello,</P> <P>I am setting up a test lab with Splunk. As I have a VPS (Virtual Private Server) for web hosting I thought it would be a good idea to have some data from a source external to my LAN.</P> <P>I installed the Universal Forwarder on my VPS, when doing so and setting the Indexer it would not let me enter the correct username and password so I had to set admin:changeme. On my LAN port forwarding is configured and DUC client from NO-IP is installed on the Splunk box, but nothing is being indexed.</P> <P>Running a netstat on my Splunk box can see active connections from VPS to the Splunk box on port 9997, which is correct as I configured on the forwarder.</P> <P>The only thing that I can think of is that auth is failing? but how can I fix this if it won't let me set the correct credentials on the forwarder? it fails straight away and looks like it doesn't even query the remote indexer.</P> <P>Would appreciate any help</P> <P>Thanks<BR /> Guy</P> Thu, 05 Jul 2012 23:36:16 GMT j666gak 2012-07-05T23:36:16Z https://community.splunk.com/t5/Getting-Data-In/Remote-Authentication-Forwarder-not-sending-from-internet-to-PC/m-p/92240#M19169 <P>Hello,</P> <P>I am setting up a test lab with Splunk. As I have a VPS (Virtual Private Server) for web hosting I thought it would be a good idea to have some data from a source external to my LAN.</P> <P>I installed the Universal Forwarder on my VPS, when doing so and setting the Indexer it would not let me enter the correct username and password so I had to set admin:changeme. On my LAN port forwarding is configured and DUC client from NO-IP is installed on the Splunk box, but nothing is being indexed.</P> <P>Running a netstat on my Splunk box can see active connections from VPS to the Splunk box on port 9997, which is correct as I configured on the forwarder.</P> <P>The only thing that I can think of is that auth is failing? but how can I fix this if it won't let me set the correct credentials on the forwarder? it fails straight away and looks like it doesn't even query the remote indexer.</P> <P>Would appreciate any help</P> <P>Thanks<BR /> Guy</P> Thu, 05 Jul 2012 23:36:16 GMT https://community.splunk.com/t5/Getting-Data-In/Remote-Authentication-Forwarder-not-sending-from-internet-to-PC/m-p/92240#M19169 j666gak 2012-07-05T23:36:16Z https://community.splunk.com/t5/Getting-Data-In/Remote-Authentication-Forwarder-not-sending-from-internet-to-PC/m-p/92241#M19170 <P>Logged in to the Universal Forwarder, then changed the password. Following this and installing the Unix app on the forwarder it worked great!</P> <P>All good</P> Sat, 07 Jul 2012 18:21:31 GMT https://community.splunk.com/t5/Getting-Data-In/Remote-Authentication-Forwarder-not-sending-from-internet-to-PC/m-p/92241#M19170 j666gak 2012-07-07T18:21:31Z