—- Setup Client forwarder
1) Install Universal Forwarder: splunkforwarder-6.5.3-36937ad027d4-macosx-10.9-intel.dmg
a. Authenticate as Admin
b. Initializes software
2) On client Terminal app
a. cd /Applications/SplunkForwarder/bin
b. sudo ./splunk add forward-server 1.2.3.4:9997 -auth admin:Password
c. sudo ./Splunk set deploy-poll 1.2.3.4:8089
d. ./Splunk restart
3) Next add data in web client
a. http://1.2.3.4:8000/en-US/manager/search/adddata/selectforwarders
http://amiracle19.blogspot.com/2015/09/troubleshooting-home-monitor-app.html
bash-3.2# ./Splunk enable boot-start -user root
=======
cd /Applications/Splunk/bin cd /Applications/SplunkForwarder/bin
sudo ./Splunk enable boot-start -user root
=================================
Change Forwarder Admin Password
splunk edit user admin -password newPassowrd -auth admin:changeme
—————————
1) Install Universal Forwarder: splunkforwarder-6.5.3-36937ad027d4-macosx-10.9-intel.dmg
a. Authenticate as Admin
b. Initializes software
2) On client Terminal app
a. cd /Applications/SplunkForwarder/bin
b. sudo ./splunk add forward-server 1.2.3.4:9997 -auth admin:changeme
c. sudo ./Splunk set deploy-poll 1.2.3.4:8089
d. ./Splunk restart
3) Next add data in web client
a. http://1.2.3.4:8000/en-US/manager/search/adddata/selectforwarders
