Getting Data In

How to onboard unknown source SC4S?

johnansett
Communicator

Hello Splunkers!

We have deployed SC4S and it works fine for Trend but we're now using it for VPN (Aviatrix) which doesn't have a prebuilt source.

Data coming into main on the fallback so we're good to go, but looking for details on HOW to add custom sources.  I've been through https://splunk-connect-for-syslog.readthedocs.io/en/master/ many times but nothing really explains it.

We've deployed Bring Your Own Environment and everything is under /etc/syslog-ng.

Would really appreciate some steps on how to add new source!

Thanks

Labels (1)
0 Karma

abk_hexion
Loves-to-Learn

Hi @johnansett can you help with the steps for setting up the sc4s server for getting syslog data into Splunk 

0 Karma

blbr123
Path Finder

Hi @johnansett I am new to splunk and want to send the syslog data to splunk,

My question is where did to setup the SC4S is it on the host device which generates logs or some other location?

Thanks you.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...