Hi everyone,
Is there any way that I can configure my Universal Forwarders to monitor their respective open ports, and then forward any information about the ports' network traffic to the receiver? I'm using Splunk Enterprise and haven't found any apps yet that do what I'm looking for.
I've also edited the outputs.conf file so that the forwarders are sending their security logs to the receiver, but I was hoping to get a more granular look at the port activity.
Thank you in advance for your help!
