Getting Data In

Need small info: Splunk forwarder on remote machine

pratiksurti
Explorer

Hello,

I have Splunk instance configured on my linux machine. I want to fetch log files from remote server where all the log files resides which is again a linux machine.

My understanding is to install Splunk forwarder on remote server which will push log files to my machine where I have configured the splunk instance. Is it correct?

Thanks.

Tags (3)
0 Karma

MHibbin
Influencer

Yes this would be the recommended method. You should read the documentation, it will help in understanding this part of a distributed deployment:
http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Aboutforwardingandreceivingdata

There are other methods like transferring the files locally/network traffic/scripted inputs. However the forwarder is the definately the recommended method for remote data collection, and it's quite easy to set-up using the documentation above

0 Karma

pratiksurti
Explorer

Thanks for the confirmation.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...