Help need for splunk rookie. How to Implement forwarders to support Application and Systems Monitoring

[Rocky31]

I really appreciate the help, thanks in advance
How to Implement forwarders to support Application and Systems Monitoring

[koshyk · Accepted solution]

hi, your question is too vague.
- What you mean by Application & Systems Monitoring
- Which OS? Where are the data/logs located?

From a high-level
- Install Universal Forwarder.
- Create an app and put inputs.conf to say what to monitor and collect
- Put outputs.conf and put where you want to send the data too
- Once you set-this up, you can extend to larger environments using deployment-server, load balancing etc.