Security

is it possible to use Splunk as a SplunkWeb and Splunk forwarder?

jangid
Builder

I am using free version of Splunk and its working fine.

Is it possible to use same time as a forwarder also?

so same log file data set I can use in main instance and forwarded instance.

Tags (1)
0 Karma
1 Solution

MHibbin
Influencer

Yes,

You need to set forwarding and receiving, and make sure that it is a Heavy forwarder for this to be indexed locally and somewhere else.

http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Distributedoverview

The light and universal forwarders both have the Splunkweb UI disabled.

If you mean you wish to have an instance of Splunk forward data to remote instance, but not index locally, and use the local machine as a search head, you should be able to do this as well but you require the enterprise license (please see this for comparison of licenses)

Cheers,

View solution in original post

MHibbin
Influencer

Yes,

You need to set forwarding and receiving, and make sure that it is a Heavy forwarder for this to be indexed locally and somewhere else.

http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Distributedoverview

The light and universal forwarders both have the Splunkweb UI disabled.

If you mean you wish to have an instance of Splunk forward data to remote instance, but not index locally, and use the local machine as a search head, you should be able to do this as well but you require the enterprise license (please see this for comparison of licenses)

Cheers,

Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...