Reporting

How to get data/logs from a Web or application server and do search and reporting from my machine?

sathishsathiyam
New Member

I wanted to index logs from Web/application server and do all the search, report, alert from my machine. How this can be done? Either i need to install a Splunk instance where the server is placed or how to get connected.

0 Karma

renjith_nair
Legend

You need a forwarder to forward the data from applicaion server, an indexer to store the data and a search head to search it. All can be in a single machine or in three different machines or in a cluster.

It's difficult to provide a short answer. You have to decide and design your splunk deployment based on what you want to ingest , how and how much

Start from here.
http://docs.splunk.com/Documentation/Splunk/6.4.3/Capacity/ComponentsofaSplunkEnterprisedeployment
http://docs.splunk.com/Documentation/Splunk/6.4.3/Capacity/DimensionsofaSplunkEnterprisedeployment
http://docs.splunk.com/Documentation/Splunk/6.1.3/Installation/CapacityplanningforalargerSplunkdeplo...

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Announcing the General Availability of Splunk Enterprise Security 8.1!

We are pleased to announce the general availability of Splunk Enterprise Security 8.1. Splunk becomes the only ...

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...