Splunk Universal Forwarder use to forward data to non splunk system

[ajaykulkarni]

Hi All,

I am new to splunk.
I am using Splunk Universal Forwarder to transfer data to Splunk Server. So I don't need to care where it stores the forwarded data!

But now the situation is I have only forwarder and I need to forward data to non splunk server (a dumb machine). Here how to configure the forwarder and mostly On the Dumb machine how to receive the data?

Simply I need to receive data on my local machine directory: c:\ReceivedDataFrom\Client1\Folder from Splunk forwarder installed on Client1

Thanks.

[ajaykulkarni]

A Windows based machine where I can receive files at specific folder from client machine having Universal Forwarders installed.

[sdaniels]

Splunk forwarders will only send data to a 3rd party via UDP or TCP. See docs below.

http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Forwarddatatothird-partysystemsd

[ajaykulkarni]

So forwarder will send data to a tcp port (lets say x.x.x.x:11000 where x.x.x.x is server's IP) to specific 3rd party server and on this server I need to have some application which listen port 11000 for incoming data.

Correct me if I am wrong. 🙂

[Ayn]

It's up to you to setup the 3rd party solution, that's not something you will achieve with Splunk.

[ajaykulkarni]

Hi All,

Simply please provide me a solution for the below problem,

1. I have one Windows based client machine C1 with Splunk Universal Forwarder.
2. I have one Windows based Machine where I want to receive the files.
3. On this machine I want to receive files as c:\FileFromC1\ReceivedFile

So How I configure Forwarder and How I store it once received?

Please help.

[Ayn]

What kind of "dumb machine" are we talking about? Splunk light forwarders cannot forward data to anything but other Splunk instances.