Splunk forwarders on network devices??

[shri_27]

Hi all,
Can Splunk forwarders be installed on Network devices such as Swithes,routers,Gateways,etc for data capture and analysis??

[mewtwo]

For best practices for network devices look at a recent blog post:
http://blogs.splunk.com/2013/05/13/network-inputs-best-practices/

[treinke]

Most of those devices do not let you install software on to them. Although they do support syslog to Splunk.

Setting Up Syslog in Splunk

Are you looking to do a tcpdump/pcap traffic capture? You could set Splunk to listen to specific ports that you forward the traffic to.

Get data from TCP and UDP ports

This sounds a lot like this question.

Splunk and Port Mirroring