Hi! I am a newbie to Splunk. I have an application on a linux server that produces logs in log4j format. I want to receive these logs on a windows machine and analyse them (count errors and successes). I have already installed Splunk Web on Windows machine and configured forwarding and receiving to receive data on port 9997 (as explained in http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Enableareceiver). I have also installed splunk forwarder on the linux server and configured inputs.conf as follows: [tcp://9997] connection_host=dns sourcetype=log4j and my log4j.xml, as follows: But it does not work. Do I miss something? Can this be implemented? Alternatively, how can I receive from the windows machine the log files generated by my log4j app and are stored in a specific path of the linux machine? Thank you in advance, -Mari ... View more