All Apps and Add-ons

How do I enable splunk stream forwarder? (1 machine, trial version)

Christians86
Loves-to-Learn Lots
 
 

Setup:

Splunk enterprise is on a VM, everything works fine

1 workstation had a universal forwarder

 

Problem: I need them to talk to eachother on the stream part.

 

What I have done until now:

  • (Splunk VM)I have added the stream app for splunk enterprise and restartet
  • (Workstation)I have added the stream app manually to C:\SplunkUniversalForwarder\etc\apps\Splunk_TA_stream
  • (Workstation)I have added into inputs.conf

    "splunk_stream_app_location =https://192.168.1.115:8000/en-us/custom/splunk_app_stream/"
  • (Workstation)I have not added anything on the workstation to streamfwd

 

When I come to (Splunk VM) - I am lost:

Christians86_0-1628087714037.png

 

What am I doing wrong?

 

Install of splunk stream into splunk enterprise (VM) was done with normal config, in other words I haven't changed where apps are installed, so everything is standard there. 


I have tried to read: https://docs.splunk.com/Documentation/StreamApp/7.3.0/DeployStreamApp/ConfigureStreamForwarder

 

But I'm not getting what I'm doing wrong here. 

 

Any suggestions please? thx

Labels (3)
0 Karma

Christians86
Loves-to-Learn Lots
 

Any suggestions?

0 Karma

Christians86
Loves-to-Learn Lots
 
 

Problem solved, I hadn't installed STM (Stream app, just the add on for forwarders)

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.