Enterprise log analytics — forwarder install and basic search
What is this?
Splunk indexes machine data for search, monitoring, and security analytics.
Step 01
1wget -O splunk.tgz 'https://download.splunk.com/products/universalforwarder/releases/9.3.0/linux/splunkforwarder-9.3.0-Linux-x86_64.tgz'2tar xzf splunk.tgz -C /opt3sudo /opt/splunkforwarder/bin/splunk start --accept-licenseStep 02
1sudo /opt/splunkforwarder/bin/splunk add forward-server splunk-server:99972sudo /opt/splunkforwarder/bin/splunk add monitor /var/log/syslog3sudo /opt/splunkforwarder/bin/splunk restartStep 03
1sudo /opt/splunkforwarder/bin/splunk list forward-serverStep 04
1sudo /opt/splunkforwarder/bin/splunk list forward-server2sudo /opt/splunkforwarder/bin/splunk list monitor3sudo tail -f /opt/splunkforwarder/var/log/splunk/splunkd.log