https://community.splunk.com/t5/Getting-Data-In/splunk-syslog-configuration/m-p/49421#M96755 <P>I guess what you want to do is forwarding your logs to an indexer!</P> <UL> <LI><A href="http://www.splunk.com/base/Documentation/4.1.7/admin/AboutForwardingAndReceiving" rel="nofollow">http://www.splunk.com/base/Documentation/4.1.7/admin/AboutForwardingAndReceiving</A></LI> <LI><A href="http://www.splunk.com/base/Documentation/latest/Admin/Enableforwardingandreceiving" rel="nofollow">http://www.splunk.com/base/Documentation/latest/Admin/Enableforwardingandreceiving</A></LI> </UL> <P>Basically you do following:</P> <P>On the forwarding (UI) side you do following:</P> <UL> <LI>Manager » Forwarding and receiving » Forward data » Add New </LI> <LI>Host(s) : &lt; your_receiver_host:9997 &gt;</LI> </UL> <P>On the receiving/indexing (UI) side you do following:</P> <UL> <LI>Manager » Forwarding and receiving » Receive data » Add New</LI> <LI>Listen on ports : 9997</LI> </UL> Thu, 24 Feb 2011 17:31:30 GMT LCM 2011-02-24T17:31:30Z https://community.splunk.com/t5/Getting-Data-In/splunk-syslog-configuration/m-p/49420#M96754 <P>How can I configure my splunk syslog server and client so that I can see logs for client application like apache,mysql,jboss</P> Thu, 24 Feb 2011 16:10:41 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-syslog-configuration/m-p/49420#M96754 bwenge 2011-02-24T16:10:41Z https://community.splunk.com/t5/Getting-Data-In/splunk-syslog-configuration/m-p/49421#M96755 <P>I guess what you want to do is forwarding your logs to an indexer!</P> <UL> <LI><A href="http://www.splunk.com/base/Documentation/4.1.7/admin/AboutForwardingAndReceiving" rel="nofollow">http://www.splunk.com/base/Documentation/4.1.7/admin/AboutForwardingAndReceiving</A></LI> <LI><A href="http://www.splunk.com/base/Documentation/latest/Admin/Enableforwardingandreceiving" rel="nofollow">http://www.splunk.com/base/Documentation/latest/Admin/Enableforwardingandreceiving</A></LI> </UL> <P>Basically you do following:</P> <P>On the forwarding (UI) side you do following:</P> <UL> <LI>Manager » Forwarding and receiving » Forward data » Add New </LI> <LI>Host(s) : &lt; your_receiver_host:9997 &gt;</LI> </UL> <P>On the receiving/indexing (UI) side you do following:</P> <UL> <LI>Manager » Forwarding and receiving » Receive data » Add New</LI> <LI>Listen on ports : 9997</LI> </UL> Thu, 24 Feb 2011 17:31:30 GMT https://community.splunk.com/t5/Getting-Data-In/splunk-syslog-configuration/m-p/49421#M96755 LCM 2011-02-24T17:31:30Z