Getting Data In

universalfowarder syslog receive and send

khyoung7410
Communicator

hi
universalforwarder receives and send the syslog data to do?
If possible, how do?

0 Karma
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

Yes, it is possible. You need to configure your UF to listen on a network port and receive syslog data. You can then forward the data to an indexer where it'll be written to disk.

The instructions for this can be found in the documentation here:

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Setupforwardingandreceiving

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

Yes, it is possible. You need to configure your UF to listen on a network port and receive syslog data. You can then forward the data to an indexer where it'll be written to disk.

The instructions for this can be found in the documentation here:

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Setupforwardingandreceiving

khyoung7410
Communicator

Thank you. I will try it

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...