All Apps and Add-ons

Send syslog to Splunk Add-on for Unix and Linux (native)


Hi all!

I have to install a Splunk server and a universal forwarder (as a syslogserver). To the UF, I send data from the firewall, switches and access points.

I use the native log forwarding methods from the devices to send the data to the UF.

Now I have to create some dashboards, including when a device is reachable, down, critical...(ping?)
Or also the bandwith from the firewall...

For these, I want to use the Splunk Add-on for Unix and Linux on the UF, and then the APP on the Server.

Is it possible to send the data from the device to the UF (with Add-on installed) without installing a UF on the firewall or switches?

Or is there maybe a preferable way to deploy it, with another app or something?

Thanks for your help!

0 Karma

Esteemed Legend

Of course. The easiest way to agentlessly send events to Splunk is with the Http Event Collector:

0 Karma
Get Updates on the Splunk Community!

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...

New Customer Testimonials

Enterprises of all sizes and across different industries are accelerating cloud adoption by migrating ...