https://community.splunk.com/t5/Getting-Data-In/What-is-the-process-on-the-Splunk-side-to-index-syslogs-through/m-p/265239#M50884 <P>Can anyone please explain the steps to taken on the Splunk side to get the syslogs through UDP?</P> <P>After configuring the syslogs with port 1024 through UDP, where can we see the logs?</P> <P>And how can Splunk receive syslogs without the help of a Splunk Universal Forwarder?</P> Wed, 07 Oct 2015 01:44:55 GMT pavanae 2015-10-07T01:44:55Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-process-on-the-Splunk-side-to-index-syslogs-through/m-p/265239#M50884 <P>Can anyone please explain the steps to taken on the Splunk side to get the syslogs through UDP?</P> <P>After configuring the syslogs with port 1024 through UDP, where can we see the logs?</P> <P>And how can Splunk receive syslogs without the help of a Splunk Universal Forwarder?</P> Wed, 07 Oct 2015 01:44:55 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-process-on-the-Splunk-side-to-index-syslogs-through/m-p/265239#M50884 pavanae 2015-10-07T01:44:55Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-process-on-the-Splunk-side-to-index-syslogs-through/m-p/265240#M50885 <P>Hi pavanae,</P> <UL> <LI>see the docs <A href="http://docs.splunk.com/Documentation/Splunk/6.3.0/Data/SyslogTCP">http://docs.splunk.com/Documentation/Splunk/6.3.0/Data/SyslogTCP</A> for a step by step guide.</LI> <LI>Since you already added the udp input; did you specify an index? If not search on <CODE>index=main</CODE> which is the default index.</LI> <LI>Splunk can receive syslog directly over UDP or TCP, see first point on this list.</LI> </UL> <P>Hope this helps ...</P> <P>cheers, MuS</P> Wed, 07 Oct 2015 01:52:49 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-process-on-the-Splunk-side-to-index-syslogs-through/m-p/265240#M50885 MuS 2015-10-07T01:52:49Z