Does the universal forwarder have a web interface? I just installed it on an Ubuntu server and was trying to decipher the CLI usage and figured there must be a quicker (less painful) way to configure. All I want to do as a first test is a) add a directory to forward log files to b) send them to my sandbox I just fired up.
No it does not.
see http://docs.splunk.com/Documentation/Splunk/6.1.3/Forwarding/Introducingtheuniversalforwarder
use the CLI or apps with configuration files.
No it does not.
see http://docs.splunk.com/Documentation/Splunk/6.1.3/Forwarding/Introducingtheuniversalforwarder
use the CLI or apps with configuration files.
You can install a full Splunk instance, enable forwarding, and add your inputs through the UI... effectively making it a heavy forwarder.
Well bummer.