Getting Data In

How to use splunk to monitor my own router for event analysis?

New Member

Hello guys,

I am very new to splunk enterprise so please bear with me...

Just want some advice or getting started tips on how can i use splunk in my own router for its event analysis.

i already search from google... but i not quite sure about it.

regards

Tags (3)
0 Karma

0 Karma

New Member

hi stephanie

thanks for the links..will take a look at it.

regards

0 Karma

Communicator

You can't install splunk on your router, unless you are using a Linux server as a router, in that case it is possible.
I assume you want your router logs to be send to a Splunk server. In that case the router need to support syslog to send out the logs to a syslog server.

The best way is to let your router send the logs to a server, let a syslog deamon (syslog-ng, rsyslog) catch the messages and write them to a file, and then let Splunk monitor that file. That way if you are fooling around in Splunk and need to restart Splunk you don't lose you logs for that time period. You can run the syslog deamon and Splunk on the same server (for home use...).

New Member

hi aholzel,

thank you for the reply., so in that case i need to configure my router right?

0 Karma

Communicator

yes you need to configure your router to send out the logs to a syslog server.

0 Karma

can you please let me know as on how to configure the router for this process

0 Karma