All Apps and Add-ons

add additional server to windows app

benwaynet
Engager

Just installed splunk for first time. When I first ran the windows app it scanned the localhost and started collecting numerous WMI and logs by default. Is there an easy way to add additional windows servers to be monitored and have them collect these same WMI and logs?

Right now I can only find a way to add addition remote eventlog monitoring.

I'm think one location where I put a server name and it scans for all the different types of inputs and reports which it can find and lets you pick what you want to monitor.

thanks,jb

Voltaire
Communicator

It depends upon what type of information you are trying to obtain from the other servers. The most comprehensive method would be to configure the other servers as either a Splunk light forwarder or as a Forwarder. ( refer to the admin manual page 90 for a detailed explanation )

Hope that helps!

bbrendon
New Member

so basically you need to install splunk on all windows servers and configure the installation to forward the information to the master. correct?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...