Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
7,000 results
Sorted by:
04-06-2022
09:08 PM
hi all,
how can i send the same data from one universal forwarder to multiple universal forwarder ?
is there a way to configure this ? if yes, please tell me the process.
Labels
- Labels:
-
configuration
Show results in replies (7)
-
Yes you can but it will hit the license meter twice so you need to cautious about that.&n...
-
You can specify multiple outputs in the outputs.conf file - each event will be sent to all d...
-
it should be the same way you generally forward data to indexing tier [tcpout] d...
-
...ach event would get forwarded to one of the destinations from the group only. It would not get forward...
-
can we transfer the same data from SplunkUF to two different groups? @PickleRick @m...
-
thnka you so much for the response. can you please provide any example stanza ?
-
It's not that simple. Splunk counts the licence usage based on raw data that is written to i...
02-14-2022
04:50 PM
...or some time. I am running SSL on port 9997 between my forwarders and my Indexer. Certs being used are custom.
I recently have had a problem with two Universal Forwarders. They are not forward...
excerpts from UF logs.pdf (67 KB)
Labels
- Labels:
-
indexer
-
universal forwarder
Show results in replies (8)
-
Further to the above information: I can perform the following tests from powershell on the t...
-
Hi @mike_k, did you tried (only for debugging) the connection without SSL? If, without S...
-
...utputs.conf (using splunk btool server list --debug) on the troublesome Universal Forwarder (UF), I c...
-
...roublesome Universal Forwarder today, however am still getting the same results.
-
...bout the logs on _internal, I suppose that the first logs were received when you installed the Forwarder...
-
Hi stupid question, but you have restarted those UFs after app has installed? r. Ismo
-
...lear text there and it was encrypted on UF side on installation time? If first one, then you must have a...
-
...lightly differently to the rest of our Universal Forwarders. On digging through the configurations a...
01-24-2022
09:17 AM
Hello all, One of the certificates associated with our universal forwarders is due to expire this week. While we have renewed the certificate, we are yet to push it on all universal forwarders. My q...
Labels
- Labels:
-
administration
-
upgrade
-
using Splunk Cloud
12-29-2021
10:30 AM
Hello all, I need the installer or zip file for Splunk Universal Forwarder 8.2.3. I can only find 8.2.2.1 or older or 8.2.4. Thanks!
Labels
- Labels:
-
universal forwarder
04-13-2021
11:46 AM
Is the data that is sent from a splunk Universal Forwarder to the heavy forwarder, syslog messages? If so, how do I find out which format it is using (ie: syslog-ng)
Labels
- Labels:
-
configuration
09-10-2021
07:35 AM
Hello, we have around 1200 systems that have UF's on them. They are a mixture of both Windows and Linux devices. I'm curious if it's possible to use a platform like Tanium or SCCM to p...
Labels
- Labels:
-
upgrade
11-22-2020
04:33 PM
Hello, On a Universal Forwarder can someone tell me where the config is that tells the universal forwarder where to send the logs? I need this for Windows and Linux. Thank you
Labels
- Labels:
-
configuration
12-16-2021
02:58 PM
Using the Splunk Universal Forwarder for windows. Does the forwarder identify the data as wineventlog? How is that set?
Labels
- Labels:
-
universal forwarder
-
Windows
06-23-2021
03:46 PM
Universal Forwarder installed on a Windows server using all default settings. Where can I find the stanza that has the types of events it is logging so that I can validate it received th
Labels
- Labels:
-
configuration
11-03-2021
02:15 PM
Hello, Can it be possible for UF to remove/delete files once it's been pushed to the indexer? How would I do that? Thank you...any help will be highly appreciated.
- Tags:
- UF-RemovedFiles
Labels
- Labels:
-
universal forwarder
