Deployment Architecture

Log ingestion in Splunk

sanjubaba
Path Finder

Is it possible to ingest logs in Splunk using inputs.conf file from a local machine where Splunk Enterprise is installed? 

Labels (4)
0 Karma

nwuest
Path Finder

Hi @sanjubaba,

It is possible to gather logs from your local box with applicable apps that you will load into the Splunk Enterprise instance you are referencing.

For a linux machine, load this into the splunk instance:
https://splunkbase.splunk.com/app/833/

For a windows machine, load this into the splunk instance:
https://splunkbase.splunk.com/app/742/

If you are looking for a specific file itself that isn't covered by these apps or any others:
Getting Data In

Let us know if this helps out with what you are looking for!

V/R,
nwuest

 

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Unlocking Unified Insights: New Gigamon Federated Search App for Splunk

In today’s data-heavy environment, organizations are caught in a data distribution dilemma. As data volumes ...

GA: New Data Management App in Splunk Platform

Streamlining Data Management: Introducing a unified experience in Splunk Managing data at scale shouldn’t feel ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...