- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to configure Splunk to collect local rsyslog data (rsyslog and Splunk are on same server)?

ananthan123
Explorer
05-31-2017
12:50 PM
Hello,
We have installed Splunk on our rsyslogd server and would like to parse all the rsyslog data to Splunk.
Can I configure as below to collect the data locally ?
*.* @@127.0.0.1
Do I need to anything else except, adding the above line?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

woodcock
Esteemed Legend
05-31-2017
01:46 PM
It is typically done like this (which is how we always do it):
http://www.georgestarcher.com/splunk-success-with-syslog/
