Getting Data In

Adding Data (system logs, event logs, etc) from Linux computer system to Windows System

ericmoss
Explorer

How do I add data (system logs, event logs, etc) from a Linux computer (forwarder) system to a Windows System (receiver)? Do I need to install Splunk on the Linux computer, then forward data using Splunk? Can I forward logs without Splunk on a linux computer? Thanks for any help.

0 Karma

tedder
Communicator

You have plenty of options, as Brian said: * install the lightweight forwarder on the Linux system, point it to the Windows box * use filesystem mounts

But there are plenty of others- syslog-ng is a fantastic option.

0 Karma

Brian_Osburn
Builder

In order to get data from the linux machine to the windows indexer, you have a couple of options.

The first is to install Splunk as a lightweight forwarder on the Linux machine and have it send the logs over to the windows machine.

The second and probably more overly complicated option is to transfer the files to the windows box using either ftp or sftp.

Brian

0 Karma

ericmoss
Explorer

Do I need to add data in the light forwarder or does it forward all linux logs?

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...