universalfowarder syslog receive and send

[khyoung7410]

hi
universalforwarder receives and send the syslog data to do?
If possible, how do?

[jbsplunk · Accepted solution]

Yes, it is possible. You need to configure your UF to listen on a network port and receive syslog data. You can then forward the data to an indexer where it'll be written to disk.

The instructions for this can be found in the documentation here:

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Setupforwardingandreceiving

[khyoung7410]

Thank you. I will try it