ability to read remote files?

[a212830]

Hi,

Doe splunk has a built-in method for watching a directory on a remote server to look for new files to download and index??

[aelliott · Accepted solution]

Yes it's called the Universal Forwarder: http://www.splunk.com/download/universalforwarder

[a212830]

fyi - found something that might work...
http://blogs.splunk.com/2014/02/14/command-modular-input-use-case-series/

[aelliott]

you install a lightweight forwarder on any remote server and it can be used to feed splunk. Of course the machine you are on has to have some way of negotiating with the remote machine, but that would be a networking discussion.

[a212830]

I referring to something that can read files on a remote server - don't think the UF provides that functionality.