Hi All,
I am new to splunk.
I am using Splunk Universal Forwarder to transfer data to Splunk Server. So I don't need to care where it stores the forwarded data!
But now the situation is I have only forwarder and I need to forward data to non splunk server (a dumb machine). Here how to configure the forwarder and mostly On the Dumb machine how to receive the data?
Simply I need to receive data on my local machine directory: c:\ReceivedDataFrom\Client1\Folder from Splunk forwarder installed on Client1
Thanks.
A Windows based machine where I can receive files at specific folder from client machine having Universal Forwarders installed.
Splunk forwarders will only send data to a 3rd party via UDP or TCP. See docs below.
http://docs.splunk.com/Documentation/Splunk/5.0/Deploy/Forwarddatatothird-partysystemsd
So forwarder will send data to a tcp port (lets say x.x.x.x:11000 where x.x.x.x is server's IP) to specific 3rd party server and on this server I need to have some application which listen port 11000 for incoming data.
Correct me if I am wrong. 🙂
It's up to you to setup the 3rd party solution, that's not something you will achieve with Splunk.
Hi All,
Simply please provide me a solution for the below problem,
So How I configure Forwarder and How I store it once received?
Please help.
What kind of "dumb machine" are we talking about? Splunk light forwarders cannot forward data to anything but other Splunk instances.