i am using fc9 webservers my server pool 192.168.0.0/24 i crated one splunk centralized server i integrated all client servers but i cont get it my clients in splunk server
i don't know how to create splunk client
pls guide me have i need to install any splunk package in client side
i followed below steps
i installed splunk in 192.168..2
cd /opt
sudo wget 'http://www.splunk.com/index.php/download_track?file=3.4.8/linux/splunk-3.4.8-54309-Linux-i686.tgz&ac=&wget=true&name=wget&typed=releases'
sudo tar xvfz splunk-3.4.6-51113-Linux-i686.tgz
sudo splunk/bin/splunk start
sudo /opt/splunk/bin/splunk enable boot-start
sudo iptables -A INPUT -s ip.address1.to.allow -p tcp --dport 8000 -j ACCEPT
sudo iptables -A INPUT -s ip.address2.to.allow -p tcp --dport 8000 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 8000 -j DROP
in mys client system 192.168.0.23
in mys client system 192.168.0.24
in mys client system 192.168.0.25
i edit in mys client systems /etc/hosts
ip.address.of.splunkserver splunkserver
/etc/syslog.conf
additional config for sending logs to splunk
*.info @splunksever
i restarted network in my clints
restarted splunk service in my centralized system
/opt/splunk/bin/splunk restart its restarted sucsessfully
i got web interface http://ipaddress:8000
i got iostat,user aditlogs information in my splunk server but i dint get my clint information
pls guide me how to intigrate my clints with splunk server
thanks in addvance
... View more