...estricted to only sending logs by either Universal Forwarder or HeavyForwarder. We have seen the discouragement associated with the heavyforwarder, and we would like to get a few things cleared up. P...
Hi,
Do we have a fail over capability for any Splunk forwarders? like if one forwarder goes down the other one will pickup and start reading the files where the other forwarder stopped
I would like to know the duty of the heavyforwarderand Indexer.
My inputs is syslog data which is read by heavyforwarder. I had set props.conf, transforms.conf in heavyforwarder itself also i...
...we're just now circling back to this initial installation we had of Light. Is it possible to take it that Light installation that is still humming along, and turn it into a heavyforwarder for o...
...restart the heavyforwarder
I believe this will result in duplicate entries and I'm wondering what is the best way I can migrate from lightforwarder to heavyforwarder while avoiding the a...
I've read the docs on how to filter events from:
http://docs.splunk.com/Documentation/Splunk/4.3.3/Deploy/Routeandfilterdatad
The documentation makes mention that somethings the lightand "U...
Greetings, At my current company, we're using Splunk Cloud and I'm looking to deploy a new HeavyForwarder to forward data along to the Cloud instance. The question is, what's the a...
...plunkForwarder
SplunkForwarder UNCONFIGURED ENABLED INVISIBLE
Now the problem: If I enable lightforwarding via GUI on the HeavyForwarder, somehow my Universal Forwarder c...
...n props and transforms. When i tried to login to HF GUI there was a message prompted to upgrade the license.
Can i convert that HF to a slave or a Free license..?
Just a quick question regarding the "Universal Forwarder"
I have setup my inputs.conf and outputs.conf in
/opt/splunkforwarder/etc/apps/SplunkUniversalForwarder/local/
this works p...