From the course: Learning Splunk

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Install the universal forwarder

Install the universal forwarder - Splunk Tutorial

From the course: Learning Splunk

Start my 1-month free trial Buy for my team

Install the universal forwarder

“

- [Instructor] So far we've only looked at logs that are local to the Splunk server itself. This is fine for getting a feel for the Splunk interface and features, but it's not very realistic. Normally Splunk would receive logs from several different machines. We can simulate having a multiple servers by using a script in our log generator folder here. So we can just run, docker compose up. And we could see that created some containers named web1 and web2. And it also provisioned a network called log_generator_default. The way the script works is it stays in the foreground, so you won't return to a prompt here. It'll keep running until we press, Ctrl+C. And it'll gracefully shut down these two web containers. This will just take a minute. We'd like to leave them running. So let's clear the screen and we'll just run, docker compose up, again. And if the second time you run it, you should just see only this message because it's not recreating everything. So open a new terminal or a…

Contents