As my title, Im going to install splunk on windows server, but i wonder that can it collect all log from differents platforms ( Linux, Unix, Windows and other network- firewall devices )?
Thanks for all answers !
But in response to you question, if you are looking to index logfiles (e.g. "/var/log"), it would be best to install a Splunk forwarder (light or universal) and have that forward your data to the Splunk index.
For network based devices, Splunk can index data transmitted over the network (e.g. syslog on UDP/514), but a better solution would be to have your network devices export the data/logs to a syslog server (e.g. syslog-ng) and then forward the data with another instance of a Splunk forwarder (this will allow more/easier control over sourcetyping, etc). Below are some interesting reads that should get you started...