Hi all, I have installed the splunk enterprise on server and deploy it on 8000 port. Also add the receiver indexer configuration on splunk enterprise link with port 9997 and universal forwarder is installed on another server to collect and get the logs on splunk enterprise. At the time of installation i have entered the deployment server IP address as server IP address where splunk enterprise is installed and port no (8000) and receiver indexer configuration set to port 9997. After installation i have restarted the splunkuniversalforwarder. But logs are not getting at splunk enterprise. So kindly assist me in this matter.
... View more