Hello. I need help solving this. I have the UF installed on RHEL Server 7.9. Underneath that server is a RHEL 7.9 machine. This machine does not have the UF installed, is not connected to the domain. Is only connected to the Server through the NIC. All of the machines logs are forwarded to the Server through rsyslog. Then the Server with the UF installed, forwards both machines logs to the Splunk server. Everything works great. Both of these machines have ClamAV installed. I need to be able to see the machines clamav defs in the Splunk dashboard. How can I do that?
