Getting Data In

How to configure Splunk to collect local rsyslog data (rsyslog and Splunk are on same server)?

ananthan123
Explorer

Hello,

We have installed Splunk on our rsyslogd server and would like to parse all the rsyslog data to Splunk.

Can I configure as below to collect the data locally ?

*.* @@127.0.0.1

Do I need to anything else except, adding the above line?

0 Karma

woodcock
Esteemed Legend

It is typically done like this (which is how we always do it):
http://www.georgestarcher.com/splunk-success-with-syslog/

0 Karma
Get Updates on the Splunk Community!

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...

New Splunk Innovations Enhance Performance and Accelerate Troubleshooting

Splunk is excited to announce new releases that empower ITOps and engineering teams to stay ahead in ever ...