All Apps and Add-ons

How do I enable splunk stream forwarder? (1 machine, trial version)

Loves-to-Learn Lots


Splunk enterprise is on a VM, everything works fine

1 workstation had a universal forwarder


Problem: I need them to talk to eachother on the stream part.


What I have done until now:

  • (Splunk VM)I have added the stream app for splunk enterprise and restartet
  • (Workstation)I have added the stream app manually to C:\SplunkUniversalForwarder\etc\apps\Splunk_TA_stream
  • (Workstation)I have added into inputs.conf

    "splunk_stream_app_location ="
  • (Workstation)I have not added anything on the workstation to streamfwd


When I come to (Splunk VM) - I am lost:



What am I doing wrong?


Install of splunk stream into splunk enterprise (VM) was done with normal config, in other words I haven't changed where apps are installed, so everything is standard there. 

I have tried to read:


But I'm not getting what I'm doing wrong here. 


Any suggestions please? thx

Labels (3)
0 Karma

Loves-to-Learn Lots

Any suggestions?

0 Karma

Loves-to-Learn Lots

Problem solved, I hadn't installed STM (Stream app, just the add on for forwarders)

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.