Getting Data In

sending syslog from tplink

imontanoisoft
Explorer

I am sending syslog from tplink switch but I can not see it in the forwarder management, however I can see the logs in the app search : source="udp:514" sourcetype="syslog"

Tags (1)
0 Karma
1 Solution

acharlieh
Influencer

Forwarder management is for managing Splunk Forwarders with a feature known as Deployment server.

Devices like switches that send logs using syslog protocols would never show up under forwarder management, nor would forwarders whose configuration is managed outside of Deployment server. (such as using Chef or other automation).

You might be interested in this documentation: https://docs.splunk.com/Documentation/Splunk/7.2.4/Updating/Aboutdeploymentserver

View solution in original post

0 Karma

acharlieh
Influencer

Forwarder management is for managing Splunk Forwarders with a feature known as Deployment server.

Devices like switches that send logs using syslog protocols would never show up under forwarder management, nor would forwarders whose configuration is managed outside of Deployment server. (such as using Chef or other automation).

You might be interested in this documentation: https://docs.splunk.com/Documentation/Splunk/7.2.4/Updating/Aboutdeploymentserver

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>