https://community.splunk.com/t5/Getting-Data-In/Do-we-need-to-install-Splunk-Light-in-both-Windows-and-Linux-to/m-p/280344#M53646 <P>See the topics in the Getting Data In chapter of the Splunk Light <EM>User Guide</EM>. The topic <A href="http://docs.splunk.com/Documentation/SplunkLight/6.4.0/GettingStarted/Aboutaddingdata">About adding data to Splunk Light</A> is a good starting point with links to more specific procedures. </P> Mon, 11 Apr 2016 17:03:17 GMT andrewb_splunk 2016-04-11T17:03:17Z https://community.splunk.com/t5/Getting-Data-In/Do-we-need-to-install-Splunk-Light-in-both-Windows-and-Linux-to/m-p/280343#M53645 <P>Hi,</P> <P>I have installed Splunk light in Windows and in Linux server also. I have installed a universal forwarder in the same Linux machine.</P> <P>In Splunk Light web page, Data - &gt; Add Data -&gt; receiving -&gt; new. I have added port as 9997</P> <P>and in Linux server, </P> <P>I have added forward server and deploy server in Splunk universal forwarder with the following commands.</P> <P><CODE>./splunk add forward-server mysystemip:9997</CODE></P> <P>and <CODE>./splunk set deploy-poll mysystemip:8089</CODE></P> <P>and started the universal forwarder and Splunk.</P> <PRE><CODE>[s249635@CTSC00621983301 ~]$ ps -ef|grep splunk s249635 2994 1 0 13:53 ? 00:00:03 splunkd -p 8089 start s249635 2995 2994 0 13:53 ? 00:00:00 [splunkd pid=2994] splunkd -p 8089 start [process-runner] s249635 3054 2995 0 13:53 ? 00:00:05 /home/s249635/splunk/bin/python -O /home/s249635/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/root.py --proxied=127.0.0.1,8065,8000 s249635 3096 2995 0 13:53 ? 00:00:00 /home/s249635/splunk/bin/splunkd instrument-resource-usage -p 8089 s249635 3329 1 0 14:04 ? 00:00:03 splunkd -p 9997 restart s249635 3330 3329 0 14:04 ? 00:00:00 [splunkd pid=3329] splunkd -p 9997 restart [process-runner] s249635 3606 3579 0 14:19 pts/0 00:00:00 grep splunk [s249635@CTSC00621983301 ~]$ </CODE></PRE> <P>Now both are up and running. In Splunk Web, I have my Linux machine in the available host list in Add data -&gt;forward -&gt; select forwarders.</P> <P>I have mentioned the path where logs need to be tracked in Splunk Web.</P> <P>Question is whether any other configurations have to be done apart from this in order to forward data from remote hosts/server?</P> Mon, 11 Apr 2016 08:53:20 GMT https://community.splunk.com/t5/Getting-Data-In/Do-we-need-to-install-Splunk-Light-in-both-Windows-and-Linux-to/m-p/280343#M53645 Monica7 2016-04-11T08:53:20Z https://community.splunk.com/t5/Getting-Data-In/Do-we-need-to-install-Splunk-Light-in-both-Windows-and-Linux-to/m-p/280344#M53646 <P>See the topics in the Getting Data In chapter of the Splunk Light <EM>User Guide</EM>. The topic <A href="http://docs.splunk.com/Documentation/SplunkLight/6.4.0/GettingStarted/Aboutaddingdata">About adding data to Splunk Light</A> is a good starting point with links to more specific procedures. </P> Mon, 11 Apr 2016 17:03:17 GMT https://community.splunk.com/t5/Getting-Data-In/Do-we-need-to-install-Splunk-Light-in-both-Windows-and-Linux-to/m-p/280344#M53646 andrewb_splunk 2016-04-11T17:03:17Z