topic Re: Getting logs in splunk using log location address in Getting Data In

Getting logs in splunk using log location address

accuser123 — Fri, 01 Jul 2016 07:15:27 GMT

Hi! I am a new to Splunk. I have an application on a linux server that produces logs in log4j format. I want to receive analysethese logs.

I have installed Splunk Web on Windows . But I want to receive continuous log data from server without using forwarder. So is there any way by which I can get the log by just using the path of the location where logs are getting generated. if it can be done please tell how I can do that.

Thanks in Advance
-Rohit

Re: Getting logs in splunk using log location address

richgalloway — Fri, 01 Jul 2016 11:46:33 GMT

Splunk and your data are on two different platforms. That's a problem for which the Universal Forwarder was designed. If you can't or won't use a forwarder then you're limited to writing the logs to shared storage (perhaps using something like Samba) that your Splunk server can read.

Re: Getting logs in splunk using log location address

accuser123 — Mon, 04 Jul 2016 06:22:41 GMT

Thanks for the answer. However i didn't got what i was looking for but i am satisfied with the answer.