I'm trying to learn about splunk for an upcoming position. I recently purchased parallels so I could utilize windows vms. I was trying to set up an indexer on one vm and the forwarder on another and just mess around with splunks capabilities. Is this even possible? So far it hasn't worked and I have tried a few alterations on the output.conf file in the forwarder. since the VMs have the same public address, I tried to use the private address and I also tried to go by hostname and it still didn't work. Any suggestions?
... View more