I have a situation where management wants to see server status of some remote deployed servers, but due mostly to politics, installing forwarders on these machines to push metrics back to our Indexer is not an option. We do, however, have an automated file mover that can send back any files we need to where the indexer can access them. We are doing that with simple text based log files already.
Is there anyway to extract the powershell scripts or commands from the typical Universal Forwarder that would generate the metrics and just have the data output to files that we could move, and still feed the Splunk-built Infrastructure app?
