Getting Data In

how can i use splunk locally in windows for analyzing logs which is available on Linux servers ?

laxmikants
Engager

till now we have been using putty tool to analyze logs locally in windows , but it is very tedious process to check all logs for every exception and it takes all day due continues generation of logs , now we find splunk and check once by using log files (csv) which we have copied from linux server, results are very satisfying . but now the problem is , we are not able to figure out how to configure splunk . so that it takes logs on real time without any human interpretation , and generate alert/ report/ dashboards , any help/suggestion would be appreciated and we are really looking forward to use splunk as our solely solution for log monitoring.

Tags (4)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi laxmikants,

best practice is to use an universal forwarder on the source server which produces the logs and forward them into your Splunk server.
Start at the docs http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/AboutgettingdataintoSplunk and work it through - Part 7 is about creating dashboards.

hope this helps ...

cheers, MuS

View solution in original post

kml_uvce
Builder

you can use universal forwarder and send files data to splunk indexer

http://docs.splunk.com/Documentation/Splunk/6.1.4/Forwarding/Setupforwardingandreceiving

kamal singh bisht

MuS
SplunkTrust
SplunkTrust

Hi laxmikants,

best practice is to use an universal forwarder on the source server which produces the logs and forward them into your Splunk server.
Start at the docs http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/AboutgettingdataintoSplunk and work it through - Part 7 is about creating dashboards.

hope this helps ...

cheers, MuS

Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...