Getting Data In

How to capture udp logs on Windows Server and then forward it to the Indexers

ongwy0303
New Member

Hi

Need advice on the following inquires:
Scenario:

  1. Currently I got a Windows Sever 2003 running and is listening for any udp traffic. I have installed the Universal forwarder onto this window Server. With this installation of the universal forwarder on the window server, i would like to capture the udp traffic and then forward it to another machine which is the splunk Indexers. Would like to know how to go about implementing it.
Tags (2)
0 Karma

Ayn
Legend

What part are you struggling with? This is achieved by adding a monitor on the UDP port (http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports ) and adding a forward server (http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Deployaforwarder ).

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...