Getting Data In

Universal Forwarder Receiving port

bachube
New Member

Is it possible to run multiple forwarders, from different servers, using just port 9997? Or would I need to specify different ports for each forwarder?

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

All of your universal forwarders use the same port.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

All of your universal forwarders use the same port.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...