Getting Data In

How do I send logs from a SSL VPN device to Splunk Heavy Forwarder?

galagapp
Loves-to-Learn

I would like to configure a SSL VPN device to send the logs over to the Splunk Heavy Forwarder on udp/514. How do I configure it? Do I just point it to the Splunk Heavy Forwarder in the Juniper SSL Device configuration? Thanks.

0 Karma

chanfoli
Builder

Hello, provided the input is set up on your heavy forwarder, and it is forwarding to your indexer, you have pretty much answered your question in that your appliance should have a way to configure it's syslog target. If you need some guidance on getting the input set up, refer to these documents.

Splunk Web method:
http://docs.splunk.com/Documentation/Splunk/6.2.1/Data/SyslogTCP

Splunk CLI method:
http://docs.splunk.com/Documentation/Splunk/6.2.1/Data/Monitornetworkports

0 Karma

galagapp
Loves-to-Learn

I have already setup the Splunk Heavy Forwarder to receive syslog inputs on udp/514. I was wondering abut the SSL VPN setup. Thanks.

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...