Hello, I just setup a splunk server and have all my windows machines running the splunkforwarder without any problems.
I have installed the splunkforwarder application onto my client machine (Mac) and can see that a PID is running on port 8089 for this application. I am unsure where to "configure" this application or what file to change/update so it points back to my splunk server with the appropriate listening port. I tried using the "To use the Splunk Web interface, point your browser at: "http://myserver.local:8000" to no avail. Any suggestions would be appreciated.
Did you try?
splunk/etc/bin/splunk add forward-server <host:port>
host being your main splunk instance(receiving) and port by default is 9997
Did you try?
splunk/etc/bin/splunk add forward-server <host:port>
host being your main splunk instance(receiving) and port by default is 9997