Forwarder configuration

—- Setup Client forwarder
1) Install Universal Forwarder: splunkforwarder-6.5.3-36937ad027d4-macosx-10.9-intel.dmg
a. Authenticate as Admin
b. Initializes software
2) On client Terminal app
a. cd /Applications/SplunkForwarder/bin
b. sudo ./splunk add forward-server 1.2.3.4:9997 -auth admin:Password
c. sudo ./Splunk set deploy-poll 1.2.3.4:8089
d. ./Splunk restart
3) Next add data in web client
a. http://1.2.3.4:8000/en-US/manager/search/adddata/selectforwarders

http://amiracle19.blogspot.com/2015/09/troubleshooting-home-monitor-app.html
bash-3.2# ./Splunk enable boot-start -user root

 

 

=======

cd /Applications/Splunk/bin cd /Applications/SplunkForwarder/bin
sudo ./Splunk enable boot-start -user root
=================================

Change Forwarder Admin Password
splunk edit user admin -password newPassowrd -auth admin:changeme
—————————
1) Install Universal Forwarder: splunkforwarder-6.5.3-36937ad027d4-macosx-10.9-intel.dmg
a. Authenticate as Admin
b. Initializes software
2) On client Terminal app
a. cd /Applications/SplunkForwarder/bin
b. sudo ./splunk add forward-server 1.2.3.4:9997 -auth admin:changeme
c. sudo ./Splunk set deploy-poll 1.2.3.4:8089
d. ./Splunk restart
3) Next add data in web client
a. http://1.2.3.4:8000/en-US/manager/search/adddata/selectforwarders

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.