hi all,
how can i send the same data from one universalforwarder to multiple universalforwarder ?
is there a way to configure this ? if yes, please tell me the process.
...or some time. I am running SSL on port 9997 between my forwarders and my Indexer. Certs being used are custom.
I recently have had a problem with two UniversalForwarders. They are not forward...
Hello all, One of the certificates associated with our universalforwarders is due to expire this week. While we have renewed the certificate, we are yet to push it on all universalforwarders. My q...
Is the data that is sent from a splunk UniversalForwarder to the heavy forwarder, syslog messages? If so, how do I find out which format it is using (ie: syslog-ng)
Hello, we have around 1200 systems that have UF's on them. They are a mixture of both Windows and Linux devices. I'm curious if it's possible to use a platform like Tanium or SCCM to p...
Hello, On a UniversalForwarder can someone tell me where the config is that tells theuniversalforwarder where to send the logs? I need this for Windows and Linux. Thank you
UniversalForwarder installed on a Windows server using all default settings. Where can I find the stanza that has the types of events it is logging so that I can validate it received th
Hello, Can it be possible for UF to remove/delete files once it's been pushed to the indexer? How would I do that? Thank you...any help will be highly appreciated.