Hello all,
I am a novice splunk storm user and just installed the universal forwarder. But the installation expects a indexer ipaddress. I assumed as I was using splunk storm that I don't need to give this... its known by the installation. After installation, I ran the command " splunk.exe list forward-server " and get :
Active forwards:
None
Configured but inactive forwards:
forwarder.splunkstorm.com:9997
I tried telneting to forwarder.splunkstorm.com at port 9997 but that fails. Is this something to setup in splunk storm itself?
Appreciate any help.
Thanks,
Sudarshan
... View more