https://community.splunk.com/t5/Getting-Data-In/sending-syslog-from-tplink/m-p/455284#M95408 <P>I am sending syslog from tplink switch but I can not see it in the forwarder management, however I can see the logs in the app search : source="udp:514" sourcetype="syslog"</P> Sun, 24 Mar 2019 00:20:55 GMT imontanoisoft 2019-03-24T00:20:55Z https://community.splunk.com/t5/Getting-Data-In/sending-syslog-from-tplink/m-p/455284#M95408 <P>I am sending syslog from tplink switch but I can not see it in the forwarder management, however I can see the logs in the app search : source="udp:514" sourcetype="syslog"</P> Sun, 24 Mar 2019 00:20:55 GMT https://community.splunk.com/t5/Getting-Data-In/sending-syslog-from-tplink/m-p/455284#M95408 imontanoisoft 2019-03-24T00:20:55Z https://community.splunk.com/t5/Getting-Data-In/sending-syslog-from-tplink/m-p/455285#M95409 <P>Forwarder management is for managing Splunk Forwarders with a feature known as Deployment server. </P> <P>Devices like switches that send logs using syslog protocols would never show up under forwarder management, nor would forwarders whose configuration is managed outside of Deployment server. (such as using Chef or other automation).</P> <P>You might be interested in this documentation: <A href="https://docs.splunk.com/Documentation/Splunk/7.2.4/Updating/Aboutdeploymentserver">https://docs.splunk.com/Documentation/Splunk/7.2.4/Updating/Aboutdeploymentserver</A></P> Sun, 24 Mar 2019 00:37:43 GMT https://community.splunk.com/t5/Getting-Data-In/sending-syslog-from-tplink/m-p/455285#M95409 acharlieh 2019-03-24T00:37:43Z