From the course: Learning Splunk
Unlock the full course today
Join today to access over 24,800 courses taught by industry experts.
Configure remote data - Splunk Tutorial
From the course: Learning Splunk
Configure remote data
- [Speaker] Now that we have the forwarder installed, we're ready to add our Splunk server and some data sources for the web server. If your Docker stack isn't already up and running, run docker compose up and that should get those two running. And then we'll switch to a different terminal here. And this time let's do the same thing we did in the last one, but we'll connect to web2 instead. So we'll say Docker exec -it web2 bash. And here we are logged into our web2 instance now. So first, let's CD /opt/splunkforwarder/bin, and I'll clear the screen here and we'll type ./splunk start. And you'll see a couple of warning messages here. This is just because we're using a container so it can't quite find the user it's expecting to. But those are okay to ignore. Let's just clear our screen again. Now we want to add our Splunk server as a place we can forward logs and docker provides handy DNS so that we can just use the short name of that container. So we'll just use ./splunk add…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.