Getting Data In

How to add input data to Splunk forwarder from UI ?

ibob0304
Communicator

I used to update the inputs.conf for ingesting new folders and logs in splunk forwareder, but is there a way to add data to splunk forwarder from UI , from splunk main UI. ?

Tags (1)
0 Karma

woodcock
Esteemed Legend

It is not possible by design. Forwarders are not supposed to have web-based GUI. They should be configured through a configuration/source management tools such as ansible, git, etc. or with a Splunk Deployment Server. You can configure manually through the CLI but there is no GUI for forwarders using the Universal Forwarder installation.

0 Karma

adonio
Ultra Champion

the Universal Forwarder has no UI
if you are using Heavy Forwarder, you can navigate to settings -> data inputs and configure from there

ibob0304
Communicator

how about making forwarder as deployment client?

0 Karma

adonio
Ultra Champion

sure, for Universal and Heavy Forwarder (or any splunk instance) you can use CLI or edit files directly, described here:
http://docs.splunk.com/Documentation/Splunk/6.5.3/Updating/Configuredeploymentclients
on HF you can use the GUI

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...