I'm evaluating Splunk and got enterprise trial installed in my PC.
I would like to forward events/java log file data using an universal forwarded to enterprise trial.
The forwarder will run on an unix machine (simple: setup a forwarder, see how it works in splunk server/receiver)
The documentation links are confusing 😞 and is frustrating:
1) The documentation has splunk on unix, unix add on, splunk app for stream etc.
Which one is exactly the universal forwarder? (which will just do forwarding of data that is configured for).
2) What should I download and where is the step-by-step installation guide for this universal forwarder?
We are listening! We have substantial revisions to the forwarder documentation in progress. Apologies for the inconvenience, and thank you for your patience as we proceed with these improvements.