Security

is it possible to use Splunk as a SplunkWeb and Splunk forwarder?

jangid
Builder

I am using free version of Splunk and its working fine.

Is it possible to use same time as a forwarder also?

so same log file data set I can use in main instance and forwarded instance.

Tags (1)
0 Karma
1 Solution

MHibbin
Influencer

Yes,

You need to set forwarding and receiving, and make sure that it is a Heavy forwarder for this to be indexed locally and somewhere else.

http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Distributedoverview

The light and universal forwarders both have the Splunkweb UI disabled.

If you mean you wish to have an instance of Splunk forward data to remote instance, but not index locally, and use the local machine as a search head, you should be able to do this as well but you require the enterprise license (please see this for comparison of licenses)

Cheers,

View solution in original post

MHibbin
Influencer

Yes,

You need to set forwarding and receiving, and make sure that it is a Heavy forwarder for this to be indexed locally and somewhere else.

http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Distributedoverview

The light and universal forwarders both have the Splunkweb UI disabled.

If you mean you wish to have an instance of Splunk forward data to remote instance, but not index locally, and use the local machine as a search head, you should be able to do this as well but you require the enterprise license (please see this for comparison of licenses)

Cheers,

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...