All Apps and Add-ons

Splunk stream

astatrial
Contributor

Hi all,
I am having issues with configuring splunk stream.

I have installed the splunk stream app, and successfully deployed the splunk_TA_stream to my forwarder, but when i am trying to configure new group in the "distributed forwarder management" i can't see the forwarder.

Note: I have ssl enabled on my splunk (1 instance splunk).

Can you tell me what am i missing ?

Thanks !

0 Karma
1 Solution

astatrial
Contributor

I have managed to finally make it work by running the streamfwd.exe file.
I am not sure what it did or why it suddenly started to work though.
There was no note to run this exe file anywhere...

View solution in original post

0 Karma

astatrial
Contributor

I have managed to finally make it work by running the streamfwd.exe file.
I am not sure what it did or why it suddenly started to work though.
There was no note to run this exe file anywhere...

0 Karma

kmower
Communicator

You also should make sure that you have installed the stream TA on your splunk Instance/search head.

0 Karma

diogofgm
SplunkTrust
SplunkTrust

have you configured the TA with the address of your server? Check this blog post for a nice walkthrough on setting up stream.

------------
Hope I was able to help you. If so, some karma would be appreciated.
0 Karma

astatrial
Contributor

I did, but it didn't worked.
I have managed to finally make it work by running the streamfwd.exe file.
I am not sure what it did or why it suddenly started to work though.
There was no note to run this exe file anywhere...

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...