https://community.splunk.com/t5/Getting-Data-In/retrofit-with-splunk-logging/m-p/156196#M31685 <P>Hi kspoton,</P> <P>Best practice is to install an universal forwarder on the source, set it up to monitor the source directory and forward the events to the Splunk indexer.</P> <P>See the docs for more details <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Forwarding/Introducingtheuniversalforwarder">http://docs.splunk.com/Documentation/Splunk/6.2.1/Forwarding/Introducingtheuniversalforwarder</A></P> <P>cheers, MuS</P> Fri, 20 Feb 2015 06:46:33 GMT MuS 2015-02-20T06:46:33Z https://community.splunk.com/t5/Getting-Data-In/retrofit-with-splunk-logging/m-p/156195#M31684 <P>Current application just writes the logs to local log file. What is the quick way to integrate Splunk so that logs get written to Splunk as well?</P> Fri, 20 Feb 2015 05:54:05 GMT https://community.splunk.com/t5/Getting-Data-In/retrofit-with-splunk-logging/m-p/156195#M31684 kspoton 2015-02-20T05:54:05Z https://community.splunk.com/t5/Getting-Data-In/retrofit-with-splunk-logging/m-p/156196#M31685 <P>Hi kspoton,</P> <P>Best practice is to install an universal forwarder on the source, set it up to monitor the source directory and forward the events to the Splunk indexer.</P> <P>See the docs for more details <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Forwarding/Introducingtheuniversalforwarder">http://docs.splunk.com/Documentation/Splunk/6.2.1/Forwarding/Introducingtheuniversalforwarder</A></P> <P>cheers, MuS</P> Fri, 20 Feb 2015 06:46:33 GMT https://community.splunk.com/t5/Getting-Data-In/retrofit-with-splunk-logging/m-p/156196#M31685 MuS 2015-02-20T06:46:33Z