Getting Data In

splunkforwarder

johnny21
Path Finder

Hello, I just setup a splunk server and have all my windows machines running the splunkforwarder without any problems.
I have installed the splunkforwarder application onto my client machine (Mac) and can see that a PID is running on port 8089 for this application. I am unsure where to "configure" this application or what file to change/update so it points back to my splunk server with the appropriate listening port. I tried using the "To use the Splunk Web interface, point your browser at: "http://myserver.local:8000" to no avail. Any suggestions would be appreciated.

0 Karma
1 Solution

MarioM
Motivator

Did you try?

splunk/etc/bin/splunk add forward-server <host:port>

host being your main splunk instance(receiving) and port by default is 9997

View solution in original post

MarioM
Motivator

Did you try?

splunk/etc/bin/splunk add forward-server <host:port>

host being your main splunk instance(receiving) and port by default is 9997

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...