https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175306#M35198 <P>Hi lbogle,</P> <P>reading your question, first thing that came up was <CODE>why not use a scripted input to get these logs?</CODE><BR /> So did you check out the docs about <A href="http://docs.splunk.com/Documentation/Splunk/6.1.1/AdvancedDev/ScriptedInputsIntro">scripted inputs</A>?</P> <P>Basically you create a script to get the logs and run this script cron like from the universal forwarder.</P> <P>hope this helps ...</P> <P>cheers, MuS</P> Thu, 22 May 2014 19:02:07 GMT MuS 2014-05-22T19:02:07Z https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175302#M35194 <P>Hello,<BR /> I am trying to get logs sent from a firewall to a Universal Forwarder. To get logs from the Firewall, I need to configure the Universal Forwarder to provide the firewall with login credentials. Can I do this with a Universal Forwarder or do I need to use a heavy forwarder?<BR /> Thanks.</P> Thu, 22 May 2014 13:57:55 GMT https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175302#M35194 lbogle 2014-05-22T13:57:55Z https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175303#M35195 <P>How does this kind of input work?</P> Thu, 22 May 2014 15:15:32 GMT https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175303#M35195 martin_mueller 2014-05-22T15:15:32Z https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175304#M35196 <P>Ha! I guess thats the question. The firewall need authentication credentials before it will allow the logs to leave so I'm not sure honestly...<BR /> Is there a spot in the universal forwarder to supply this information? <BR /> It may be too complex a request for the universal forwarder to do.<BR /> Thanks Martin.</P> Thu, 22 May 2014 15:50:09 GMT https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175304#M35196 lbogle 2014-05-22T15:50:09Z https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175305#M35197 <P>Well, without any more info I don't know what to say.</P> Thu, 22 May 2014 15:51:48 GMT https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175305#M35197 martin_mueller 2014-05-22T15:51:48Z https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175306#M35198 <P>Hi lbogle,</P> <P>reading your question, first thing that came up was <CODE>why not use a scripted input to get these logs?</CODE><BR /> So did you check out the docs about <A href="http://docs.splunk.com/Documentation/Splunk/6.1.1/AdvancedDev/ScriptedInputsIntro">scripted inputs</A>?</P> <P>Basically you create a script to get the logs and run this script cron like from the universal forwarder.</P> <P>hope this helps ...</P> <P>cheers, MuS</P> Thu, 22 May 2014 19:02:07 GMT https://community.splunk.com/t5/Getting-Data-In/Login-to-resource-from-Universal-Forwarder/m-p/175306#M35198 MuS 2014-05-22T19:02:07Z