Add new servers

[chigueral]

Hi:

How can I add a new server to splunk, I have 20 new servers and I need to this servers send the informaiton like, windows logs, systems, security, etc...

[alanfinlay]

Hi Chigueral,

It sounds like someone else setup Splunk to monitor windows servers (using windows app), and you need to add new servers. See the windows app documentation [http://apps.splunk.com], you can use WMI (remote access) or a forwarder on each server, so you need to find out which approach is being used.

[rturk]

Hi Chigueral,

Sounds like you're new to Splunk. If you haven't done so already, I would highly recommend going through the online Splunk tutorial to get a grounding about Splunk and what it does.

• Splunk Tutorial: http://docs.splunk.com/Documentation/Splunk/latest/Tutorial/WelcometotheSplunktutorial

After that, spend some time with the documentation. It's written well and will help you get your data on board. If you think you have a fairly good grasp of Splunk, the following link will help you get different types of data in:

• Splunk Doco: Get Data In: http://docs.splunk.com/Documentation/Splunk/latest/Data/WhatSplunkcanmonitor
• Splunk Doco: Introducing the Universal Forwarder: http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Introducingtheuniversalforwarder

I hope this helps 🙂