All Apps and Add-ons

Splunk Add-on for Apache Web Server: If I have this app do I still need a forwarder to forward Apache logs?

deepakc
Builder

I have Splunk 7.1 / RHEL65 / Test enviroment
(New to splunk)

I see you have Splunk Add-on for Apache Web Server, but do you still need a forwarder to forward the apache logs?

Rgds
Dee

0 Karma
1 Solution

mayurr98
Super Champion

hey @deepakc

Yes, you will still need forwarder to forward apache logs
as add-on works on the top of universal forwarder.add-on extracts the data from source and forwarder forwards data to the indexer.

difference between forwarder and add-on is as follows:

universal forwarder: it is used to send data from source to indexer
Splunk app: you need to install in indexer or search head and shows you report, visualization
Splunk addon: you need to install Splunk add-on in forwarder and addon extract the data from source (example run scripts in UNIX addon) v and send to indexer via forwarder

Let me know if this helps you!

View solution in original post

0 Karma

mayurr98
Super Champion

hey @deepakc

Yes, you will still need forwarder to forward apache logs
as add-on works on the top of universal forwarder.add-on extracts the data from source and forwarder forwards data to the indexer.

difference between forwarder and add-on is as follows:

universal forwarder: it is used to send data from source to indexer
Splunk app: you need to install in indexer or search head and shows you report, visualization
Splunk addon: you need to install Splunk add-on in forwarder and addon extract the data from source (example run scripts in UNIX addon) v and send to indexer via forwarder

Let me know if this helps you!

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...