How to capture udp logs on Windows Server and then forward it to the Indexers

[ongwy0303]

Hi

Need advice on the following inquires:
Scenario:

1. Currently I got a Windows Sever 2003 running and is listening for any udp traffic. I have installed the Universal forwarder onto this window Server. With this installation of the universal forwarder on the window server, i would like to capture the udp traffic and then forward it to another machine which is the splunk Indexers. Would like to know how to go about implementing it.

[Ayn]

What part are you struggling with? This is achieved by adding a monitor on the UDP port (http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports ) and adding a forward server (http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Deployaforwarder ).