https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373512#M67692 <P>Hi Team,</P> <P>I have installed Splunk setup on one of my VM. On another VM I installed the Splunk universal forwarder to send the logs to Splunk Server. </P> <P>I copied to make changes for inputs.conf and outputs.conf files to local folder to make changes because on default folder we shouldn't do changes.</P> <P>So, they were so many attributes to make changes in both files. I am in confusion state.</P> <P>Please tell me the basic values like where to insert host , source, sourcetype names, monitor file names, index name, etc in inputs.conf and where to give Splunk Server or Indexer IP, port number in outputs.conf.</P> <P>Because i am setting up my test environment so that I wont do mistakes in my production environment .</P> <P>Thanks &amp; Regards,<BR /> Ravi</P> Wed, 28 Jun 2017 16:06:57 GMT ravisplunksap 2017-06-28T16:06:57Z https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373512#M67692 <P>Hi Team,</P> <P>I have installed Splunk setup on one of my VM. On another VM I installed the Splunk universal forwarder to send the logs to Splunk Server. </P> <P>I copied to make changes for inputs.conf and outputs.conf files to local folder to make changes because on default folder we shouldn't do changes.</P> <P>So, they were so many attributes to make changes in both files. I am in confusion state.</P> <P>Please tell me the basic values like where to insert host , source, sourcetype names, monitor file names, index name, etc in inputs.conf and where to give Splunk Server or Indexer IP, port number in outputs.conf.</P> <P>Because i am setting up my test environment so that I wont do mistakes in my production environment .</P> <P>Thanks &amp; Regards,<BR /> Ravi</P> Wed, 28 Jun 2017 16:06:57 GMT https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373512#M67692 ravisplunksap 2017-06-28T16:06:57Z https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373513#M67693 <P>It's hard to say where to start. Maybe at <A href="https://docs.splunk.com/Documentation/Splunk/6.6.1/Admin/Listofconfigurationfiles">List of configuration files</A></P> Wed, 28 Jun 2017 16:55:23 GMT https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373513#M67693 ddrillic 2017-06-28T16:55:23Z https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373514#M67694 <P>Steps should be like this</P> <P>Configure Receiver (if not already done) <A href="https://docs.splunk.com/Documentation/Forwarder/6.6.1/Forwarder/Enableareceiver">https://docs.splunk.com/Documentation/Forwarder/6.6.1/Forwarder/Enableareceiver</A></P> <P>Configure Forwarding<BR /> <A href="http://docs.splunk.com/Documentation/Forwarder/6.5.2/Forwarder/Configureforwardingwithoutputs.conf">http://docs.splunk.com/Documentation/Forwarder/6.5.2/Forwarder/Configureforwardingwithoutputs.conf</A></P> <P>Configure Data inputs. THis step generally have a pre-requisite of configuring event processing (<A href="http://docs.splunk.com/Documentation/Splunk/6.6.1/Data/Overviewofeventprocessing">http://docs.splunk.com/Documentation/Splunk/6.6.1/Data/Overviewofeventprocessing</A>)<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.6.1/Data/Configureyourinputs">http://docs.splunk.com/Documentation/Splunk/6.6.1/Data/Configureyourinputs</A></P> Wed, 28 Jun 2017 17:03:43 GMT https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373514#M67694 somesoni2 2017-06-28T17:03:43Z https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373515#M67695 <P>thanks somesoni2</P> Fri, 30 Jun 2017 06:32:44 GMT https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373515#M67695 ravisplunksap 2017-06-30T06:32:44Z https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373516#M67696 <P>This looked like it helped you significantly with your problem. I have converted this to an answer, If you agree it was helpful, could you mark it as Accepted? If not, ask some more!</P> Fri, 30 Jun 2017 14:09:24 GMT https://community.splunk.com/t5/Getting-Data-In/Where-to-make-configuration-changes-in-inputs-conf-and-outputs/m-p/373516#M67696 Richfez 2017-06-30T14:09:24Z