topic Re: How to add input data to Splunk forwarder from UI ? in Getting Data In

How to add input data to Splunk forwarder from UI ?

ibob0304 — Fri, 21 Apr 2017 20:27:56 GMT

I used to update the inputs.conf for ingesting new folders and logs in splunk forwareder, but is there a way to add data to splunk forwarder from UI , from splunk main UI. ?

Re: How to add input data to Splunk forwarder from UI ?

adonio — Fri, 21 Apr 2017 20:36:33 GMT

the Universal Forwarder has no UI
if you are using Heavy Forwarder, you can navigate to settings -> data inputs and configure from there

Re: How to add input data to Splunk forwarder from UI ?

ibob0304 — Fri, 21 Apr 2017 20:41:16 GMT

how about making forwarder as deployment client?

Re: How to add input data to Splunk forwarder from UI ?

adonio — Fri, 21 Apr 2017 20:46:27 GMT

sure, for Universal and Heavy Forwarder (or any splunk instance) you can use CLI or edit files directly, described here:
http://docs.splunk.com/Documentation/Splunk/6.5.3/Updating/Configuredeploymentclients
on HF you can use the GUI

Re: How to add input data to Splunk forwarder from UI ?

woodcock — Fri, 21 Apr 2017 22:49:35 GMT

It is not possible by design. Forwarders are not supposed to have web-based GUI. They should be configured through a configuration/source management tools such as ansible, git, etc. or with a Splunk Deployment Server. You can configure manually through the CLI but there is no GUI for forwarders using the Universal Forwarder installation.