Standard way to add data files to splunk forwarder in windows and linux

[sumanth_isac]

Hi all i am playing with 10 splunk forwarders.
I want to add data to splunk forwarder, i am using winscp. But it cannot be used in windows environment.

I want to know what is the standard method used by splunkers to add data files to forwarder (both linux and windows) in testing environment.

[sumanth_isac · Accepted solution]

Dart my forwarder lies in EC2.
Stefano_guid you hit the nail, thats what i wanted to know.
Thank you both for reply.

[stefano_guidoba]

I don't know Amazon EC2 aswell, but I'm sure there's a fast way to put files on those machines. Upload via HTTP or FTP, probably.

[stefano_guidoba]

I'm sorry, you mean to actually put some log files on your Splunk Forwarders? This is not a "Splunk" question. You have to ask your SysAdmin how to put files on Splunk servers. On Windows, there are various solutions like FTP, RDC with local disks sharing, NFS, etc. etc.

[dart]

Are your forwarders where your data resides? Typically you would put a forwarder on the system where the data resides and then use that forward data to your splunk indexer(s).

If it is, this should http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitorfilesanddirectories help you out.