web Brower or network logs

[kareem]

how can I make the Splunk agent collect the web Brower or network logs from Endpoint (windows, Linux) to the Splunk Server 

[marnall]

Typically you would make apps in the Splunk forwarders which have input.conf files. E.g.

$SPLUNKHOME/etc/apps/inputapp1/local/inputs.conf

In the inputs.conf file you would have a stanza that specifies which logfile to collect:

[monitor:///var/log/mylog.log]
index=myindex
sourcetype=mysourcetype

You would also have an outputs.conf app in the forwarder which would specify the indexers to forward the logs to.