Getting Data In

How to receive data from forwarders in the trial version of Splunk installed on my personal laptop?

xbbj3nj
Path Finder

How to receive data from forwarders in a Splunk trial/free version instance installed on my personal laptop?

0 Karma
1 Solution

hunters_splunk
Splunk Employee
Splunk Employee

Hi xbbj3nj,

On your laptop Splunk instance, enable listening on a specific port (default 9997) in one of the following ways:

  • Run this command line in the command console:

    splunk enable listen 9997

  • In Splunk Web, select Settinigs > Forwarding and Receiving from the menu, then click Configure Receiving and add a new listening port - 9997.

Then on your forwarder, run the following command to forward data to your receiving instance and port:

splunk add forward-server <your_laptop_ip>:9997 

For more detailed information, please refer to documentation:
http://docs.splunk.com/Documentation/Splunk/6.5.1/Forwarding/Aboutforwardingandreceivingdata

Hope this helps. Thanks!
Hunter

View solution in original post

hunters_splunk
Splunk Employee
Splunk Employee

Hi xbbj3nj,

On your laptop Splunk instance, enable listening on a specific port (default 9997) in one of the following ways:

  • Run this command line in the command console:

    splunk enable listen 9997

  • In Splunk Web, select Settinigs > Forwarding and Receiving from the menu, then click Configure Receiving and add a new listening port - 9997.

Then on your forwarder, run the following command to forward data to your receiving instance and port:

splunk add forward-server <your_laptop_ip>:9997 

For more detailed information, please refer to documentation:
http://docs.splunk.com/Documentation/Splunk/6.5.1/Forwarding/Aboutforwardingandreceivingdata

Hope this helps. Thanks!
Hunter

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...