https://community.splunk.com/t5/Installation/Splunk-Configuration/m-p/309802#M7800 <P>hello there,</P> <P>did you enable inputs on 9997 on your laptop? (inputs.conf)<BR /> do you have a connection between VM and laptop?<BR /> do you have a defined index for linux data that matches your inputs.conf on VM?<BR /> look at this link and follow the guidlines.<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/Cantfinddata">http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/Cantfinddata</A></P> <P>we are here to help</P> Mon, 02 Apr 2018 12:41:35 GMT adonio 2018-04-02T12:41:35Z https://community.splunk.com/t5/Installation/Splunk-Configuration/m-p/309801#M7799 <P>Hi All,</P> <P>Have installed Universal forwarder in my VM linux machine &amp; Splunk Enterprise in my Windows laptop.</P> <P>Configured universal forwarder indexer IP : Windows Laptop IP :9997 in the outputs.conf.</P> <P>Please let me know the further configuration i need to do so that i can get the VM linux machines logs into my windows laptop splunk enterprise GUI.</P> <P>Thanks,</P> <P>Ramu.R</P> Mon, 02 Apr 2018 10:01:04 GMT https://community.splunk.com/t5/Installation/Splunk-Configuration/m-p/309801#M7799 mailmetoramu 2018-04-02T10:01:04Z https://community.splunk.com/t5/Installation/Splunk-Configuration/m-p/309802#M7800 <P>hello there,</P> <P>did you enable inputs on 9997 on your laptop? (inputs.conf)<BR /> do you have a connection between VM and laptop?<BR /> do you have a defined index for linux data that matches your inputs.conf on VM?<BR /> look at this link and follow the guidlines.<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/Cantfinddata">http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/Cantfinddata</A></P> <P>we are here to help</P> Mon, 02 Apr 2018 12:41:35 GMT https://community.splunk.com/t5/Installation/Splunk-Configuration/m-p/309802#M7800 adonio 2018-04-02T12:41:35Z