Getting Data In

How to add input data to Splunk forwarder from UI ?

ibob0304
Communicator

I used to update the inputs.conf for ingesting new folders and logs in splunk forwareder, but is there a way to add data to splunk forwarder from UI , from splunk main UI. ?

Tags (1)
0 Karma

woodcock
Esteemed Legend

It is not possible by design. Forwarders are not supposed to have web-based GUI. They should be configured through a configuration/source management tools such as ansible, git, etc. or with a Splunk Deployment Server. You can configure manually through the CLI but there is no GUI for forwarders using the Universal Forwarder installation.

0 Karma

adonio
Ultra Champion

the Universal Forwarder has no UI
if you are using Heavy Forwarder, you can navigate to settings -> data inputs and configure from there

ibob0304
Communicator

how about making forwarder as deployment client?

0 Karma

adonio
Ultra Champion

sure, for Universal and Heavy Forwarder (or any splunk instance) you can use CLI or edit files directly, described here:
http://docs.splunk.com/Documentation/Splunk/6.5.3/Updating/Configuredeploymentclients
on HF you can use the GUI

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...