- Splunk Answers
- :
- Using Splunk
- :
- Splunk Dev
- :
- How to configure inputs.confg & outputs.confg for ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to configure inputs.confg & outputs.confg for splunk forwarder on windows pls help me out
How to configure inputs.confg & outputs.confg for splunk forwarder on windows pls help me out
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
As you know, the forwarder is controlled via CLI exclusively as Driany mentioned. Based on that, you will be able to add some stanzas to inputs.conf using command like that one available below:
$ splunk add monitor "C:\logs"
This will write a new stanza in forwarder's inputs.conf and all the configured servers will receive data collect from the files located into "C:\logs" dir.
outputs.conf is used to set up configuration level and groups of indexers which will receive collected data. Give you a chance to read the online manual regarding outputs.conf that is a forwarder's exclusive file: http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Configureforwarderswithoutputs.confd
Cheers, WB
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ok..tnq wagnerbianchi
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
From the detail of your question, you're probably best starting here;
http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Setupforwardingandreceiving
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I've just re-read this entire thread and have no idea where we started or really ended. Glad it helped though!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Exactly i did not get about CLI any way tnq for your suport..
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You don't... the forwarder is controlled via CLI exclusively. Have you actually read the link I've pasted? Please read it, you'll actually learn how it works and how to configure it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
well it show stoped and started forwarder but how i can open in browser
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Well it should still start, can you paste exactly what it prints when you try to do a splunk start on the command line?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
when i was execute cmd in bin directory
splunk restart
spunk setup was coming after clicking yes it will take 1min after that i got message unable to start forwarder
i did not configure anything while i was installing may b that is reason how to overcome that..pls
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
... your question doesn't even mention this. Could you edit the original question with the real question and what errors you are receiving when starting etc?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My problem is i unable to run splunk forwader after i was instaling
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What do you mean? You need an input to define what is input to the forwarder and you need an output to define what is output to the indexer. If read the link I've pasted above you'll have a good understanding of how they work and how to configure the outputs, the inputs are identical to the indexer configuration so just use what you should have learnt from the main Splunk tutorial to build that.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
what config require input and output files on this location
C..>Program Files..>SplunkUniversalForwarder..>etc..>system..>local
Introducing the 2024 SplunkTrust!
Introducing the 2024 Splunk MVPs!
Splunk Custom Visualizations App End of Life
