https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147965#M185351 <P>Add a syslog data input, probably a UDP data input on port 514 with a default sourcetype of syslog. Turn on syslog at the Switch to send data to the Splunk server on that port.</P> Thu, 13 Feb 2014 13:33:41 GMT dmaislin_splunk 2014-02-13T13:33:41Z https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147963#M185349 <P>Hi,</P> <P>I am very new to this tool. I have just installed Splunk 6.0 and till now haven't add any data. </P> <P>I want to use this tool for my DC Network infra monitoring. So, can you please help me out how to proceed further ?</P> <P>Your quick ans would be really appreciable.</P> <P>Regards,<BR /> Tuhin</P> Wed, 12 Feb 2014 14:50:10 GMT https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147963#M185349 tuhinbhowmick 2014-02-12T14:50:10Z https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147964#M185350 <P>More specifically, how should I forward the Cisco Switch data directly to Splunk so that it can use those data for showing result.</P> <P>I have read about Splunk Universal Forwarder to collect dat directly from endpoints. So, in that case if I want to get the data directly from my Cisco Switch to SPLUNK, then how to proceed ?</P> <P>Regards,<BR /> Tuhin</P> Wed, 12 Feb 2014 15:16:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147964#M185350 tuhinbhowmick 2014-02-12T15:16:46Z https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147965#M185351 <P>Add a syslog data input, probably a UDP data input on port 514 with a default sourcetype of syslog. Turn on syslog at the Switch to send data to the Splunk server on that port.</P> Thu, 13 Feb 2014 13:33:41 GMT https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147965#M185351 dmaislin_splunk 2014-02-13T13:33:41Z https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147966#M185352 <P>We already have SYSLOG server. Is there any way SPLUNK can fetch data directly from SYSLOG server or we need to install SPLUNK on syslog server itself to analyze the data ?</P> <P>Regards, <BR /> Tuhin</P> Thu, 13 Feb 2014 15:48:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147966#M185352 tuhinbhowmick 2014-02-13T15:48:49Z https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147967#M185353 <P>Yes, install a Splunk Universal Forwarder on the syslog server and forward the events directly into Splunk. You will need to setup Splunk as a receiver on the default port of 9997 if you have not done so already. This is pretty much the standard way that all customers get data from a syslog server into Splunk.</P> Thu, 13 Feb 2014 15:51:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147967#M185353 dmaislin_splunk 2014-02-13T15:51:40Z https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147968#M185354 <P>Forwarders are a different download and are very lightweight: <A href="http://www.splunk.com/download/universalforwarder">http://www.splunk.com/download/universalforwarder</A></P> Thu, 13 Feb 2014 15:53:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-configure-network-devices-on-splunk/m-p/147968#M185354 dmaislin_splunk 2014-02-13T15:53:40Z