Forwarder configuration

—- Setup Client forwarder
1) Install Universal Forwarder: splunkforwarder-6.5.3-36937ad027d4-macosx-10.9-intel.dmg
a. Authenticate as Admin
b. Initializes software
2) On client Terminal app
a. cd /Applications/SplunkForwarder/bin
b. sudo ./splunk add forward-server 1.2.3.4:9997 -auth admin:Password
c. sudo ./Splunk set deploy-poll 1.2.3.4:8089
d. ./Splunk restart
3) Next add data in web client
a. http://1.2.3.4:8000/en-US/manager/search/adddata/selectforwarders

http://amiracle19.blogspot.com/2015/09/troubleshooting-home-monitor-app.html
bash-3.2# ./Splunk enable boot-start -user root

 

 

=======

cd /Applications/Splunk/bin cd /Applications/SplunkForwarder/bin
sudo ./Splunk enable boot-start -user root
=================================

Change Forwarder Admin Password
splunk edit user admin -password newPassowrd -auth admin:changeme
—————————
1) Install Universal Forwarder: splunkforwarder-6.5.3-36937ad027d4-macosx-10.9-intel.dmg
a. Authenticate as Admin
b. Initializes software
2) On client Terminal app
a. cd /Applications/SplunkForwarder/bin
b. sudo ./splunk add forward-server 1.2.3.4:9997 -auth admin:changeme
c. sudo ./Splunk set deploy-poll 1.2.3.4:8089
d. ./Splunk restart
3) Next add data in web client
a. http://1.2.3.4:8000/en-US/manager/search/adddata/selectforwarders

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.