topic Re: How can I get Splunk to access and forward Windows Events from a remote laptop? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-can-I-get-Splunk-to-access-and-forward-Windows-Events-from-a/m-p/301330#M56953 <P>very general steps here:<BR /> open relevant ports on both computers, splunk default is 9997<BR /> make sure you can telnet between both laptops on that port<BR /> install splunk on both (you can install only universal forwarder on data source but to make it easy install the full version)<BR /> using the gui, configure receiving on the target<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/Enableareceiver">http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/Enableareceiver</A><BR /> using gui configure outputs on the source<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/EnableforwardingonaSplunkEnterpriseinstance">http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/EnableforwardingonaSplunkEnterpriseinstance</A><BR /> tell the source which files you would like to monitor<BR /> good luck<BR /> hope it helps</P> Fri, 07 Jul 2017 17:58:19 GMT adonio 2017-07-07T17:58:19Z How can I get Splunk to access and forward Windows Events from a remote laptop? https://community.splunk.com/t5/Getting-Data-In/How-can-I-get-Splunk-to-access-and-forward-Windows-Events-from-a/m-p/301329#M56952 <P>How can I get Windows Events forwarded to a Splunk Enterprise Instance I just set up on a different laptop?</P> <P>Thank you very much</P> Fri, 07 Jul 2017 17:12:42 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-get-Splunk-to-access-and-forward-Windows-Events-from-a/m-p/301329#M56952 TestNet1 2017-07-07T17:12:42Z Re: How can I get Splunk to access and forward Windows Events from a remote laptop? https://community.splunk.com/t5/Getting-Data-In/How-can-I-get-Splunk-to-access-and-forward-Windows-Events-from-a/m-p/301330#M56953 <P>very general steps here:<BR /> open relevant ports on both computers, splunk default is 9997<BR /> make sure you can telnet between both laptops on that port<BR /> install splunk on both (you can install only universal forwarder on data source but to make it easy install the full version)<BR /> using the gui, configure receiving on the target<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/Enableareceiver">http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/Enableareceiver</A><BR /> using gui configure outputs on the source<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/EnableforwardingonaSplunkEnterpriseinstance">http://docs.splunk.com/Documentation/Splunk/6.6.1/Forwarding/EnableforwardingonaSplunkEnterpriseinstance</A><BR /> tell the source which files you would like to monitor<BR /> good luck<BR /> hope it helps</P> Fri, 07 Jul 2017 17:58:19 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-get-Splunk-to-access-and-forward-Windows-Events-from-a/m-p/301330#M56953 adonio 2017-07-07T17:58:19Z Re: How can I get Splunk to access and forward Windows Events from a remote laptop? https://community.splunk.com/t5/Getting-Data-In/How-can-I-get-Splunk-to-access-and-forward-Windows-Events-from-a/m-p/301331#M56954 <P>Install Splunk Universal Forwarder on the laptop. Configure <CODE>outputs.conf</CODE> to point to your indexer. Configure <CODE>inputs.conf</CODE> to send your windows events. That's it.</P> Fri, 07 Jul 2017 21:30:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-get-Splunk-to-access-and-forward-Windows-Events-from-a/m-p/301331#M56954 woodcock 2017-07-07T21:30:51Z