we should install forwarder on search head? ... View more

hi , in installing universal forwarder in search head ask me mngmnt port: and i set 8090 , now with netstat i get 8000 , 8089 , 8090 third of them are tcp , but i cant see ui of localhost:8000 , what should i do ? please help me please , please :((( i see apache 2 in lovalost , but with port 8000 no, what is my problem?can you help me? ... View more

also you said in last part that forwarder not need to install on search head , but in your commands you turn off this form search peer(indexer) . it confused me. [tcpout] defaultGroup = my_search_peers forwardedindex.filter.disable = true indexAndForward = false [tcpout:my_search_peers] server=10.10.10.1:9997,10.10.10.2:9997 * autoLB = true ... View more

so universal forwarder will be install in indexers? ... View more

hi , please give me your advises about this link , it is ok for universal forwarder and search indexer deploying?after theses i should just deploy search head? in this link , forwarder installed on search indexer , but you say no , universal forwarder should be install in your host(in my case , i have 3 nodes in vmware and my system(windows)), then in my case , i shoud install and deploy universal forwarder in windows?or in my search indexers?(2 of 3 nodes , one of them be search head).if yes , in each one of search indexers i should install forwarder?with 9997 port?is not create conflict? this link is : https://www.youtube.com/watch?v=ST3UOM4TS60 please help me , i am busy with deploy splunk distributed a weak , please help me. i dont have enough time , my time of dissertation will be finished next a few days . please help me , thanks. ... View more

can you help me? please help me , forwarder should be install in search head or search index(peer) or both of them? please help me , i dont have enough time.,please help me , i dont have enough time for deploying , can you help me? my problem is forwarder , universal forwarder should be just in search head install or in search index(peer)? ... View more