Getting Data In

universal forwarder for domain machines

engrimranzakir
Explorer

Hi all,

Is it possible to configure universal forwarder in one machine that collect logs from all other domain machines rather than installing UF on each machines,

 

Thanks.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible, but there are considerations.  Splunk has a document on the subject.  See https://docs.splunk.com/Documentation/Splunk/8.2.3/Data/ConsiderationsfordecidinghowtomonitorWindows...

---
If this reply helps you, Karma would be appreciated.

engrimranzakir
Explorer

Thanks for your reply, Its appreciated.

Can you please share some helping document of System Center Configuration Manager (SCCM) or or a third party distribution solution such as Puppet., the tool used to collect logs .

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I do no have such documentation, but I'm sure Google does.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...