https://community.splunk.com/t5/Getting-Data-In/universalfowarder-syslog-receive-and-send/m-p/25447#M4137 <P>hi<BR /> universalforwarder receives and send the syslog data to do?<BR /> If possible, how do?</P> Thu, 12 Apr 2012 13:15:25 GMT khyoung7410 2012-04-12T13:15:25Z https://community.splunk.com/t5/Getting-Data-In/universalfowarder-syslog-receive-and-send/m-p/25447#M4137 <P>hi<BR /> universalforwarder receives and send the syslog data to do?<BR /> If possible, how do?</P> Thu, 12 Apr 2012 13:15:25 GMT https://community.splunk.com/t5/Getting-Data-In/universalfowarder-syslog-receive-and-send/m-p/25447#M4137 khyoung7410 2012-04-12T13:15:25Z https://community.splunk.com/t5/Getting-Data-In/universalfowarder-syslog-receive-and-send/m-p/25448#M4138 <P>Yes, it is possible. You need to configure your UF to listen on a network port and receive syslog data. You can then forward the data to an indexer where it'll be written to disk. </P> <P>The instructions for this can be found in the documentation here:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Setupforwardingandreceiving">http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Setupforwardingandreceiving</A></P> Thu, 12 Apr 2012 14:31:32 GMT https://community.splunk.com/t5/Getting-Data-In/universalfowarder-syslog-receive-and-send/m-p/25448#M4138 jbsplunk 2012-04-12T14:31:32Z https://community.splunk.com/t5/Getting-Data-In/universalfowarder-syslog-receive-and-send/m-p/25449#M4139 <P>Thank you. I will try it</P> Fri, 13 Apr 2012 02:28:59 GMT https://community.splunk.com/t5/Getting-Data-In/universalfowarder-syslog-receive-and-send/m-p/25449#M4139 khyoung7410 2012-04-13T02:28:59Z