https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415200#M73413 <P>Can I use splunk app for linux without installing universal forwarder on each linux host I need their logs?</P> Sun, 14 Apr 2019 06:05:41 GMT sabaKhadivi 2019-04-14T06:05:41Z https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415200#M73413 <P>Can I use splunk app for linux without installing universal forwarder on each linux host I need their logs?</P> Sun, 14 Apr 2019 06:05:41 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415200#M73413 sabaKhadivi 2019-04-14T06:05:41Z https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415201#M73414 <P>If you are referring to <A href="https://splunkbase.splunk.com/app/3412/">Splunk Add-on for Linux</A> then you could read the documentation around this for example <A href="https://docs.splunk.com/Documentation/AddOns/released/Linux/Configure">configure collectd to send data</A></P> <P>If you are using collectd on the remote machines you would not need a universal forwarder on each Linux machine.</P> Sun, 14 Apr 2019 23:39:48 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415201#M73414 gjanders 2019-04-14T23:39:48Z https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415202#M73415 <P>The app is useless without the logs but certainly there are may ways to get them in. You can use the <CODE>UF</CODE>, <CODE>snare</CODE>, <CODE>fluentd</CODE>, to name just a few tools.</P> Mon, 15 Apr 2019 14:31:58 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415202#M73415 woodcock 2019-04-15T14:31:58Z https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415203#M73416 <P>you can use forwarding from syslog (rsyslog, syslogng etc) or as named above. i prefer fluentbit</P> Mon, 15 Apr 2019 15:05:14 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-install-splunk-app-for-linux-without-installing-the/m-p/415203#M73416 pgelnar_hci 2019-04-15T15:05:14Z