Getting Data In

The only way is to use UF to send logs?

splunkcol
Builder

To get logs from either Windows or Linux path, is there a different way to use a Universal forwarder? or is it the only way?

 

I don't know how stupid the question is but it's better to make sure

Labels (3)
0 Karma

tscroggins
Influencer

Hi @splunkcol,

There are other ways to get data into Splunk, the most common being raw TCP or UDP ports, i.e. syslog, and the HTTP Event Collector.

Do you have a use case that precludes or prohibits using Splunk Universal Forwarder?

splunkcol
Builder

My client asked to inform him if outside the agent another method can be used.

He even mentioned that the agent's technical requirements seemed very high.

0 Karma
Get Updates on the Splunk Community!

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...