DNS Logs ingestion without Universal Forwarder

[ramnesh]

Hi Team,

We need to ingest DNS Logs in Splunk Version 8.0 without using Universal Forwarder.

Kindly let us know how we can proceed on this further.

Regards,

Ramnesh Dubey

[inventsekar]

Please check this blog for syslog installation and configuration process. 

https://www.splunk.com/en_us/blog/tips-and-tricks/using-syslog-ng-with-splunk.html

(i have earned the 250 karma givers badge. how many karma points have you given so far?!?!)

[ramnesh]

Hi Inventsekar,

Thanks for quick turnaround.

we are looking for log forwarding through another machine to splunk instance.

our dns logs need to be fowarded from a windows box to another machine and then from that machine to splunk.

could you specify how should we forward logs via syslog without causing any error?

device owner is not allowing to forward logs via universal forwarder.

Thanks and Regards,

Ramnesh

[inventsekar]

Please let us know more info...

DNS is on Windows or which system?

are you ok to use syslog to send the logs to splunk(without using universal forwarder).

[ramnesh]

Hi ,

Thanks for quick turnaround.

we are looking for log forwarding through another machine to splunk instance.

our dns logs need to be fowarded from a windows box to another machine and then from that machine to splunk.

could you specify how should we forward logs via syslog without causing any error?

device owner is not allowing to forward logs via universal forwarder.

Thanks and Regards,

Ramnesh