Getting Data In

Splunk Forwarder on DC 2022 unable to receive data?

Ziadm
Path Finder

So today i installed the forwarder on a DC that is hosted on a VM but i cant seem to get any logs from this machine  i've already enabled Splunk to listen on  9997  for receiving  I'm also using the Splunk for windows addon and enabled all the logs from the config file (after copying it to the local directory) and the Splunk instance is hosted on the host machine and I've already setup the networking between the host and the VM

i basically followed this  Guide   but i still can't get to forward the events , am i missing any steps here? , i also confirmed that the indexer was set correctly from the outputs file



i was able to input data from the local host without an issue before if that helps
Capture.PNG

Labels (2)
0 Karma

Ziadm
Path Finder

it's important to note that i'm using the free trial so  i can't open a ticket with support
i'm just trying to practice Splunk on my own 

0 Karma

Ziadm
Path Finder

The log File 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...