Getting Data In

How to add input data to Splunk forwarder from UI ?

ibob0304
Communicator

I used to update the inputs.conf for ingesting new folders and logs in splunk forwareder, but is there a way to add data to splunk forwarder from UI , from splunk main UI. ?

Tags (1)
0 Karma

woodcock
Esteemed Legend

It is not possible by design. Forwarders are not supposed to have web-based GUI. They should be configured through a configuration/source management tools such as ansible, git, etc. or with a Splunk Deployment Server. You can configure manually through the CLI but there is no GUI for forwarders using the Universal Forwarder installation.

0 Karma

adonio
Ultra Champion

the Universal Forwarder has no UI
if you are using Heavy Forwarder, you can navigate to settings -> data inputs and configure from there

ibob0304
Communicator

how about making forwarder as deployment client?

0 Karma

adonio
Ultra Champion

sure, for Universal and Heavy Forwarder (or any splunk instance) you can use CLI or edit files directly, described here:
http://docs.splunk.com/Documentation/Splunk/6.5.3/Updating/Configuredeploymentclients
on HF you can use the GUI

0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...