<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to setup data inputs configuration for universal forwarder and receiver? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-setup-data-inputs-configuration-for-universal-forwarder/m-p/196703#M39129</link>
    <description>&lt;P&gt;Hi @kpavan&lt;/P&gt;

&lt;P&gt;Yup, you have to configure your indexer to receive data from your universal forwarder. Check out this documentation on enabling your receiver/indexer:&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.0.3/Forwarding/Enableareceiver"&gt;http://docs.splunk.com/Documentation/Splunk/6.0.3/Forwarding/Enableareceiver&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 27 Aug 2014 19:18:09 GMT</pubDate>
    <dc:creator>ppablo</dc:creator>
    <dc:date>2014-08-27T19:18:09Z</dc:date>
    <item>
      <title>How to setup data inputs configuration for universal forwarder and receiver?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-setup-data-inputs-configuration-for-universal-forwarder/m-p/196702#M39128</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;

&lt;P&gt;I have installed splunkforwarder-6.0.3 on windows server and configured .conf as below. Please let me know if am missing anything.&lt;/P&gt;

&lt;H2&gt;inputs.conf&lt;/H2&gt;

&lt;P&gt;[monitor:://C:\Program Files (x86)\Hitachi ID\Telephone Password Manager\Logs\TEST-PSYNCH\idmsuite.log]&lt;BR /&gt;
disabled = 0 &lt;BR /&gt;
sourcetype = my_sourcetype&lt;BR /&gt;
host = my_hostname&lt;/P&gt;

&lt;H2&gt;outputs.conf&lt;/H2&gt;

&lt;P&gt;[tcpout]&lt;BR /&gt;
autoLB = true&lt;BR /&gt;
compressed = false&lt;BR /&gt;
defaultGroup = wdc&lt;BR /&gt;
[tcpout:wdc]&lt;BR /&gt;
server = servername.com:9997,servername.com:9997&lt;BR /&gt;
useACK=true&lt;/P&gt;

&lt;P&gt;This is first time i have installed splunk. Do i need to configure anything from indexer side?&lt;/P&gt;

&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 17:25:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-setup-data-inputs-configuration-for-universal-forwarder/m-p/196702#M39128</guid>
      <dc:creator>kpavan</dc:creator>
      <dc:date>2020-09-28T17:25:11Z</dc:date>
    </item>
    <item>
      <title>Re: How to setup data inputs configuration for universal forwarder and receiver?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-setup-data-inputs-configuration-for-universal-forwarder/m-p/196703#M39129</link>
      <description>&lt;P&gt;Hi @kpavan&lt;/P&gt;

&lt;P&gt;Yup, you have to configure your indexer to receive data from your universal forwarder. Check out this documentation on enabling your receiver/indexer:&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.0.3/Forwarding/Enableareceiver"&gt;http://docs.splunk.com/Documentation/Splunk/6.0.3/Forwarding/Enableareceiver&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 27 Aug 2014 19:18:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-setup-data-inputs-configuration-for-universal-forwarder/m-p/196703#M39129</guid>
      <dc:creator>ppablo</dc:creator>
      <dc:date>2014-08-27T19:18:09Z</dc:date>
    </item>
  </channel>
</rss>

