Reporting

How to get data/logs from a Web or application server and do search and reporting from my machine?

sathishsathiyam
New Member

I wanted to index logs from Web/application server and do all the search, report, alert from my machine. How this can be done? Either i need to install a Splunk instance where the server is placed or how to get connected.

0 Karma

renjith_nair
Legend

You need a forwarder to forward the data from applicaion server, an indexer to store the data and a search head to search it. All can be in a single machine or in three different machines or in a cluster.

It's difficult to provide a short answer. You have to decide and design your splunk deployment based on what you want to ingest , how and how much

Start from here.
http://docs.splunk.com/Documentation/Splunk/6.4.3/Capacity/ComponentsofaSplunkEnterprisedeployment
http://docs.splunk.com/Documentation/Splunk/6.4.3/Capacity/DimensionsofaSplunkEnterprisedeployment
http://docs.splunk.com/Documentation/Splunk/6.1.3/Installation/CapacityplanningforalargerSplunkdeplo...

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...