Getting Data In

How to configure a universal forwarder on Windows to send data to another Windows system?

rakeshh123
Path Finder

I already installed the universal forwarder on a Windows system. What I would like to do is get the data into another Windows system from the forwarder, but I can't figure this out, so please help me.
I have set the forwarder and receiver to listen on port 9997.

I configured like this on my receiver machine:

inputs.conf file

[default]
host = TRAINING12

[splunktcp://9997]
connection_host=ip

deployementclient.conf

[deployment-client]

[target-broker:deploymentServer]
targetUri= deploymentserver.splunk.satishnagalla:9997

serverclass.conf

[serverClass:satishnagalla:app:_server_app_rakesh]
restartSplunkWeb = 0
restartSplunkd = 0
stateOnClient = enabled

[serverClass:satishnagalla]
whitelist.0 = *

[serverClass:satishnagalla:app:_server_app_satishnagalla]

I configured like this in my forwarder machine:

output.conf file:

[tcpout]
defaultGroup=receiver
indexAndForward=true

[tcpout:receiver]
disabled = false
server=VEDICINDIA-PC:9996,TRAINING12:9997

[tcpout-server://TRAINING12:9997]

inputs.conf file:

[default]
host = satishnagalla

[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
disabled = 0
0 Karma

Umesh_Vedicsoft
Path Finder

i got the answer from somebody else which is related to your question. It may use full for you check it once.
https://answers.splunk.com/answers/352888/how-to-configure-the-splunk-universal-forwarder-an.html

skoelpin
SplunkTrust
SplunkTrust

Is your outputs.conf pointing to your indexer?

0 Karma
Get Updates on the Splunk Community!

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...