Getting Data In

How to capture udp logs on Windows Server and then forward it to the Indexers

ongwy0303
New Member

Hi

Need advice on the following inquires:
Scenario:

  1. Currently I got a Windows Sever 2003 running and is listening for any udp traffic. I have installed the Universal forwarder onto this window Server. With this installation of the universal forwarder on the window server, i would like to capture the udp traffic and then forward it to another machine which is the splunk Indexers. Would like to know how to go about implementing it.
Tags (2)
0 Karma

Ayn
Legend

What part are you struggling with? This is achieved by adding a monitor on the UDP port (http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports ) and adding a forward server (http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Deployaforwarder ).

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...