https://community.splunk.com/t5/Splunk-Search/How-do-I-index-and-search-UDP-traffic-for-a-specific-host-from/m-p/240218#M71391 <P>Do you know which host you're looking for? Do you know if there's a specific index your UDP data goes into, or if there's a way you're flagging data that you're collecting via UDP?</P> Wed, 29 Jun 2016 22:23:52 GMT jluo_splunk 2016-06-29T22:23:52Z https://community.splunk.com/t5/Splunk-Search/How-do-I-index-and-search-UDP-traffic-for-a-specific-host-from/m-p/240217#M71390 <P>I need to get UDP traffic for a specific host from searches. How do I configure this or search </P> Wed, 29 Jun 2016 05:44:42 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-index-and-search-UDP-traffic-for-a-specific-host-from/m-p/240217#M71390 splunkgk 2016-06-29T05:44:42Z https://community.splunk.com/t5/Splunk-Search/How-do-I-index-and-search-UDP-traffic-for-a-specific-host-from/m-p/240218#M71391 <P>Do you know which host you're looking for? Do you know if there's a specific index your UDP data goes into, or if there's a way you're flagging data that you're collecting via UDP?</P> Wed, 29 Jun 2016 22:23:52 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-index-and-search-UDP-traffic-for-a-specific-host-from/m-p/240218#M71391 jluo_splunk 2016-06-29T22:23:52Z https://community.splunk.com/t5/Splunk-Search/How-do-I-index-and-search-UDP-traffic-for-a-specific-host-from/m-p/240219#M71392 <P>I'd recommend looking at the Splunk Stream add on. This will allow you to capture network traffic over the wire and filter based on transport type, application, dst/src port etc. </P> <P><A href="http://www.splunk.com/en_us/products/splunk-app-for-stream.html">http://www.splunk.com/en_us/products/splunk-app-for-stream.html</A></P> Thu, 30 Jun 2016 01:53:02 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-index-and-search-UDP-traffic-for-a-specific-host-from/m-p/240219#M71392 esix_splunk 2016-06-30T01:53:02Z