https://community.splunk.com/t5/Getting-Data-In/How-to-setup-Brocade-Switches-to-send-SYSLOG-data-to-Splunk/m-p/464585#M80102 <P>HI everyone,</P> <P>We have a Splunk architecture of 2 HFs, 4 indexers and 1 Master Node..</P> <P>We are wanting to onboard syslog data from Brocade switches but are novice about the procedure from Brocade perspective.</P> <P>Need help with setup on Brocade Switches so they can send their syslog data to Splunk</P> Wed, 11 Dec 2019 11:14:01 GMT Splunker2911 2019-12-11T11:14:01Z https://community.splunk.com/t5/Getting-Data-In/How-to-setup-Brocade-Switches-to-send-SYSLOG-data-to-Splunk/m-p/464585#M80102 <P>HI everyone,</P> <P>We have a Splunk architecture of 2 HFs, 4 indexers and 1 Master Node..</P> <P>We are wanting to onboard syslog data from Brocade switches but are novice about the procedure from Brocade perspective.</P> <P>Need help with setup on Brocade Switches so they can send their syslog data to Splunk</P> Wed, 11 Dec 2019 11:14:01 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-setup-Brocade-Switches-to-send-SYSLOG-data-to-Splunk/m-p/464585#M80102 Splunker2911 2019-12-11T11:14:01Z https://community.splunk.com/t5/Getting-Data-In/How-to-setup-Brocade-Switches-to-send-SYSLOG-data-to-Splunk/m-p/464586#M80103 <P>You should configure the Brocade switches to send syslog messages to a syslog server, then forward the data to Splunk. There is a really good presentation from Splunk .conf 2017 that goes into detail for Splunk syslog at scale...<BR /> <A href="https://conf.splunk.com/files/2017/slides/to-hec-with-syslog-scalable-aggregated-data-collection-in-splunk.pdf">https://conf.splunk.com/files/2017/slides/to-hec-with-syslog-scalable-aggregated-data-collection-in-splunk.pdf</A></P> <P>Give this presentation a read, I'm sure it will answer the majority of your questions on the Splunk side.</P> <P>The Brocade device configuration specifics I found after a quick google seem pretty straight forward...<BR /> switch1:admin&gt; syslogdIpAdd “192.168.23.138(IP address of remote syslog server or VIP on a load balancer)” Committing configuration…done.</P> Thu, 26 Dec 2019 20:56:06 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-setup-Brocade-Switches-to-send-SYSLOG-data-to-Splunk/m-p/464586#M80103 mydog8it 2019-12-26T20:56:06Z