All Apps and Add-ons

is it possible to use file monitoring on external server that doesnt have splunk or forwarder?

splunkt0n
New Member

Hi All,

Would like to ask if it is possible to monitor files outside the server without using a forwarder. Thank you in advance.

0 Karma
1 Solution

nickhills
Ultra Champion

I presume you mean without using a forwarder "on that" system?

Two approaches immediately spring to mind:
1.) Map/Mount the remote filesystem onto a suitable host which is running the forwarder
2.) Script or otherwise schedule log shipping from your target server to your forwarder and process them as if they were local logs.

In both cases you can override the hostname so that the logs get attributed to the correct server

There are pros and cons to each, but will depend on your use case.

If my comment helps, please give it a thumbs up!

View solution in original post

0 Karma

splunkt0n
New Member

Hi nickhillscpl,

how about if the servers are in two different networks?

0 Karma

nickhills
Ultra Champion

I presume you mean without using a forwarder "on that" system?

Two approaches immediately spring to mind:
1.) Map/Mount the remote filesystem onto a suitable host which is running the forwarder
2.) Script or otherwise schedule log shipping from your target server to your forwarder and process them as if they were local logs.

In both cases you can override the hostname so that the logs get attributed to the correct server

There are pros and cons to each, but will depend on your use case.

If my comment helps, please give it a thumbs up!

View solution in original post

0 Karma

splunkt0n
New Member

thank you for that answer nickhillscpl. how about if the servers are in different network? what we're trying to achieve is that we monitor the logs on a specific server on a different network without installing a forwarder.

0 Karma

nickhills
Ultra Champion

what access do you have to these servers? are they windows or linux?

If my comment helps, please give it a thumbs up!
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.