Is it possible to configure heavy forwarder input...

human96 · ‎03-10-2022

Is it possible to configure HF's inputs.conf for data transferring from UF?

Please provide some Splunk documentation

SanjayReddy · ‎03-10-2022

Hi @human96

On HF please configure below stanza in etc/system/local/inputs.conf

Inputs.conf

[splunktcp:9997]

or using cmd

run follwoing commanf $SPLUNK_HOME/bin/

splunk enable listen 9997 -auth admin:password

Link do doc

Is it possible to configure heavy forwarder inputs.conf for data transferring from universal forwarder?