Getting Data In

How to verify if Splunk Forwarder is receiving the data on a UDP port

ssankeneni
Communicator

How can I verify if my universal forwarder is receiving the data on the UDP port ? I don't see any thing in my splunkd logs.

0 Karma

Ayn
Legend

Easiest is to run something like tcpdump, Wireshark or similar and see if traffic flows in on the port.

0 Karma

Ayn
Legend

index=_internal group=per_source_thruput series=udp:514

ssankeneni
Communicator

I don't have access to the machine to install any new rpms. Can you please let me know is there any way i could find it through Splunk.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...