Splunk Forwarder

[vaibhavbeohar]

Hi,

I have installed splunk in one server machine and able to get the data but when i try to get the data from remote machine its not working, have installed forwarder in remote machine also.

Can you please explain step by step configuration of splunk forwarder in remote machine and also if i install forwarder how will i get the remote machine data on splunk server.

Thanks,

[MarioM]

As gkanapathy said... it is in the docs:

you need to setup your main instance as receiver (Enable Receiver) and the Universal Forwarder to forward the data to this main instance(
Set up forwarding and receiving: universal forwarders)...

[gkanapathy]

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Distributedoverview