Splunk Search

Deployment,Search Head,Indexer,Forwarder simple setup

rjantarasami
New Member

Please correct my simple step by step in linux environment:

Forwarder :
-Install splunkforwarder, accept license, enable boot-start.
-/opt/splunkforwarder/bin/splunk add forward-server ip-myindexer-server:9997
-/opt/splunkforwarder/bin/splunk list forward-server
-/opt/splunkforwarder/bin/splunk add monitor /var/log/apache/logs/ -index main -sourcetype %app%

Indexer :
-install splunk enterprise, accept license, enable boot-start.
-/opt/splunk/bin/splunk enable listen 9997

Search Head :
I dont know how to add indexer using CLI ?

Deployment Server :
I dont know how to setup here ?

Tags (3)
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...