I am a complete beginner. I know how to onboard the data via upload and Monitor options. But in real time, I know that they will not use any of these options. They will be using command line way I believe. So, I want to learn this from experts like you. If you can share the documentation or video that might be helpful.
Could you be more specific, please? What data are you onboarding? What do you mean by "via server" (Splunk is a server)? What is your Splunk architecture (standalone, indexer cluster, etc)?
--- If this reply helps you, Karma would be appreciated.
