All Apps and Add-ons

Send syslog to Splunk Add-on for Unix and Linux (native)


Hi all!

I have to install a Splunk server and a universal forwarder (as a syslogserver). To the UF, I send data from the firewall, switches and access points.

I use the native log forwarding methods from the devices to send the data to the UF.

Now I have to create some dashboards, including when a device is reachable, down, critical...(ping?)
Or also the bandwith from the firewall...

For these, I want to use the Splunk Add-on for Unix and Linux on the UF, and then the APP on the Server.

Is it possible to send the data from the device to the UF (with Add-on installed) without installing a UF on the firewall or switches?

Or is there maybe a preferable way to deploy it, with another app or something?

Thanks for your help!

0 Karma

Esteemed Legend

Of course. The easiest way to agentlessly send events to Splunk is with the Http Event Collector:

0 Karma
Get Updates on the Splunk Community!

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...