Getting Data In

How to install the Splunk forwarder on a BlueCat DNS/DHCP Server?

hessf
New Member

Has anyone successfully installed the Splunk Forwarder on a BlueCat DNS/DHCP Server or otherwise got full DNS logging into Splunk from one?

0 Karma

adonio
Ultra Champion

Works well when writing Bluecat data to syslog and using a forwarder to monitor the logs directories
correctly looking on nice data from Bluecat through syslog-ng
info.log
debug.log
notice.log
warning.log
err.log

hope it helps

0 Karma

lguinn2
Legend

I haven't, but I have a question - what is the underlying OS? And do you have command line access to the server, with sufficient privileges to install software? Splunk forwarders don't require elevated privileges to run, but you do have to get them installed at the very least.

0 Karma

hessf
New Member

It's Debian-based but there are no repositories for dependencies. We have the privileges but we've seen our modifications on these blown away before during upgrades so I was hoping to hear from a customer with experience.

0 Karma

TWiseOne
Path Finder

Hi, did you ever get an answer to this, or install the UF successfully on your Bluecat system?

I am currently looking into how to retrieve the logs required for DNS and have no Bluecat experience so knowing whether I can use a UF on the device/OS would be of great help to get me started.

Thanks,

T

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...