https://community.splunk.com/t5/Splunk-Search/windows-client-to-splunk/m-p/353665#M170047 <P>Can you give configuration file are used for data transfer?</P> Tue, 24 Apr 2018 13:25:54 GMT p_gurav 2018-04-24T13:25:54Z https://community.splunk.com/t5/Splunk-Search/windows-client-to-splunk/m-p/353664#M170046 <P>hello all</P> <P>i have a client that i already installed splunk forwarder on it and configured to log everything and send it to another forwarder.<BR /> the middle forwarder receive the traffic from the client ip on port 514 and then forward it to cluster indexers</P> <P>but there is no log on indexers and cant see anything on index that i defined for it or default indexes that the active directory TA has created.</P> <P>any solution for this ?<BR /> can you help to solve the problem ?</P> Tue, 24 Apr 2018 09:23:33 GMT https://community.splunk.com/t5/Splunk-Search/windows-client-to-splunk/m-p/353664#M170046 payamhaddad 2018-04-24T09:23:33Z https://community.splunk.com/t5/Splunk-Search/windows-client-to-splunk/m-p/353665#M170047 <P>Can you give configuration file are used for data transfer?</P> Tue, 24 Apr 2018 13:25:54 GMT https://community.splunk.com/t5/Splunk-Search/windows-client-to-splunk/m-p/353665#M170047 p_gurav 2018-04-24T13:25:54Z https://community.splunk.com/t5/Splunk-Search/windows-client-to-splunk/m-p/353666#M170048 <P>why do you need another forwarder in the middle? why use UDP 514 to receive data? do you send on UDP 514 as well to the middle forwarder?<BR /> start here:<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/7.1.0/Troubleshooting/Cantfinddata">http://docs.splunk.com/Documentation/Splunk/7.1.0/Troubleshooting/Cantfinddata</A></P> Sun, 06 May 2018 19:19:54 GMT https://community.splunk.com/t5/Splunk-Search/windows-client-to-splunk/m-p/353666#M170048 adonio 2018-05-06T19:19:54Z