Hello, On a UniversalForwarder can someone tell me where the config is that tells theuniversalforwarder where to send the logs? I need this for Windows and Linux. Thank you
...or some time. I am running SSL on port 9997 between my forwarders and my Indexer. Certs being used are custom.
I recently have had a problem with two UniversalForwarders. They are not forward...
Hi, I am struggling to configure Splunk forwarder to get data into splunk. I am trying to get the data ( auth.log ) sent across from a Kali linux operating system. When I configured it in k...
Hi I need to update theUniversalForwarder credential package manually. Due to our configuration, I can't follow the steps out line here in this document. I unpacked the `.spl` file t...
...2 box. I have configured the indexer to listen on port 9997 and it reports it is properly doing so when I run splunk display listen . I have theforwarder pointed to the indexer on that same port b...
...ave configured it to receive data via port 9997 through the "Forwarding and Receiving" settings page. I have installed a UniversalForwarder on another server. I added a forward-server (side note: C...
...ertificate authority (CA).
I have followed the instructions as outlined in; http://www.splunk.com/base/Documentation/latest/Deploy/DeployaWindowsdfmanually and read http://www.splunk.com/base/D...
Hello, is there a way to upgrade Splunk universalforwarder to all onboarded endpoints using the deployment server? I was looking for answers but I didn't find anything helpful. Thank you.
Is the data that is sent from a splunk UniversalForwarder to the heavy forwarder, syslog messages? If so, how do I find out which format it is using (ie: syslog-ng)
Hi,
We are taken Splunk cloud community edition trail. and we have installed universalforwarder in windows but it is not communicating to cloud server.
We are getting error like this:
&n...