I have a UF installed on syslog server and now I want the data to come to HF and not to go to UF. I just need the syslog data to be completely redirected to HF from UF. What are the config changes that I need to do?
Hi @novotxms,
let me understand: are you asking help on how to configure the syslog source or what else?
If this is your need, it depends on the the source appliance: you have to go in the management interface and change the syslog destination IP.
Obviously, remember to configure the HF to receive syslogs on a predefined port and protocol.
Ciao.
Giuseppe
I do not have access to syslog server.
I just have access to HF and not even to splunk indexer which is the UF. Yes I am asking help on the configuration changes that I should do
Hi @novotxms,
sorry, but there's something that I don't understand:
Is it correct?
It's not clear for me when you say: "splunk indexer which is the UF", Indexer and UF usually are two different systems!
Anyway, if you want to receive syslogs on the HF instead of the UF, you have to do the following steps:
Ciao.
Giuseppe
This helped me.. Thanks a lot for your help
Hi @novotxms,
if this answer solves your need, please accept it for the other people of Community.
Ciao and happy splunking.
Giuseppe
P.S.: Karma Points are appreciated 😉