Getting Data In

Universal Forwarder Deployment

dersa
Explorer

Good morning,

i'm new to Splunk and have a question regarding universal forwarder deployment. I installed the UF on a windows machine, in order to configure it via the deploment server do i have to copy the SplunkForwarder folder from /opt/splunk/etc/apps to /opt/splunk/etc$ cd deployment-apps/ ?
And what files I have to configured to make the client send data to my indexer?

thanks in advanced
Alex

0 Karma

ekost
Splunk Employee
Splunk Employee

There is a highly detailed example using the Deployment Server and what configurations to deploy here.

Get Updates on the Splunk Community!

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...