https://community.splunk.com/t5/Getting-Data-In/Data-extraction-from-multiple-servers/m-p/38060#M6979 <P>You can monitor files remotely by exposing the logs in a file share, then mount and monitor it on a server where you have a Splunk forwarder or indexer installed. Most filesharing protocols should work (eg. SMB/CIFS, NFS, SSHFS, ...)</P> Fri, 27 Apr 2012 15:43:18 GMT ziegfried 2012-04-27T15:43:18Z https://community.splunk.com/t5/Getting-Data-In/Data-extraction-from-multiple-servers/m-p/38059#M6978 <P>Is splunk capable of pulling multiple log files from different servers without installing the universal forwarder on the machines?</P> Fri, 27 Apr 2012 14:17:51 GMT https://community.splunk.com/t5/Getting-Data-In/Data-extraction-from-multiple-servers/m-p/38059#M6978 aaronkorn 2012-04-27T14:17:51Z https://community.splunk.com/t5/Getting-Data-In/Data-extraction-from-multiple-servers/m-p/38060#M6979 <P>You can monitor files remotely by exposing the logs in a file share, then mount and monitor it on a server where you have a Splunk forwarder or indexer installed. Most filesharing protocols should work (eg. SMB/CIFS, NFS, SSHFS, ...)</P> Fri, 27 Apr 2012 15:43:18 GMT https://community.splunk.com/t5/Getting-Data-In/Data-extraction-from-multiple-servers/m-p/38060#M6979 ziegfried 2012-04-27T15:43:18Z https://community.splunk.com/t5/Getting-Data-In/Data-extraction-from-multiple-servers/m-p/38061#M6980 <P>ziegfried is correct, but we generally would recommened installing the universal forwarder for best experience.</P> Fri, 27 Apr 2012 18:49:45 GMT https://community.splunk.com/t5/Getting-Data-In/Data-extraction-from-multiple-servers/m-p/38061#M6980 araitz 2012-04-27T18:49:45Z