Getting Data In

splunkforwarder

johnny21
Path Finder

Hello, I just setup a splunk server and have all my windows machines running the splunkforwarder without any problems.
I have installed the splunkforwarder application onto my client machine (Mac) and can see that a PID is running on port 8089 for this application. I am unsure where to "configure" this application or what file to change/update so it points back to my splunk server with the appropriate listening port. I tried using the "To use the Splunk Web interface, point your browser at: "http://myserver.local:8000" to no avail. Any suggestions would be appreciated.

0 Karma
1 Solution

MarioM
Motivator

Did you try?

splunk/etc/bin/splunk add forward-server <host:port>

host being your main splunk instance(receiving) and port by default is 9997

View solution in original post

MarioM
Motivator

Did you try?

splunk/etc/bin/splunk add forward-server <host:port>

host being your main splunk instance(receiving) and port by default is 9997

Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...