没有合适的资源?快使用搜索试试~ 我知道了~
首页splunk forwarder 操作手册
splunk forwarder 操作手册
需积分: 50 26 下载量 191 浏览量
更新于2023-03-16
评论
收藏 1.05MB PDF 举报
Splunk forwarder 所以操作手册,包括介绍,安装,卸载,更新等
资源详情
资源评论
资源推荐
Splunk
®
Universal Forwarder Forwarder
Manual 7.1.1
Generated: 7/03/2018 1:45 pm
Copyright (c) 2018 Splunk Inc. All Rights Reserved
Table of Contents
Introducing the universal forwarder..................................................................1
The universal forwarder..............................................................................1
About forwarding and receiving data...........................................................3
Plan your universal forwarder deployment.......................................................5
Universal forwarder system requirements...................................................5
Example forwarder deployment topologies.................................................6
Compatibility between forwarders and Splunk Enterprise indexers..........11
Forward data to Splunk Light...........................................................................14
How to forward data to Splunk Light.........................................................14
How to forward data to Splunk Light Cloud...............................................14
Forward data to Splunk Cloud..........................................................................16
How to forward data to Splunk Cloud........................................................16
Forward data to Splunk Enterprise..................................................................17
How to forward data to Splunk Enterprise.................................................17
Enable a receiver......................................................................................21
Install the universal forwarder software.....................................................22
Consolidate data from multiple hosts........................................................23
Install the universal forwarder software..........................................................26
Install a Windows universal forwarder from an installer............................26
Install a Windows universal forwarder from the command line.................35
Install a Windows universal forwarder from a ZIP file...............................48
Install a Windows universal forwarder remotely with a static
configuration.............................................................................................54
Install a *nix universal forwarder...............................................................56
Install a *nix universal forwarder remotely with a static configuration.......64
Make a universal forwarder part of a host image......................................71
Start and stop the universal forwarder............................................................75
Start the universal forwarder.....................................................................75
Stop the universal forwarder.....................................................................76
Configure the universal forwarder...................................................................77
Configure the universal forwarder.............................................................77
Configure forwarding with outputs.conf.....................................................80
i
Table of Contents
Configure the universal forwarder
Supported CLI commands........................................................................88
Upgrade the universal forwarder......................................................................91
Upgrade the Windows universal forwarder...............................................91
Upgrade the *nix universal forwarder........................................................94
Upgrade a universal forwarder to a heavy forwarder................................97
Uninstall the universal forwarder.....................................................................99
Uninstall the universal forwarder...............................................................99
Perform advanced configuration....................................................................103
Configure load balancing for Splunk Enterprise......................................103
Configure a forwarder to use a SOCKS proxy........................................111
Configure an intermediate forwarder.......................................................115
Configure a forwarder to handle multiple pipeline sets...........................116
Configure forwarding to Splunk Enterprise indexer clusters...................117
Control forwarder access........................................................................121
Protect against loss of in-flight data........................................................125
Migrate from Splunk light forwarders............................................................131
Migrate from a light forwarder.................................................................131
Migrate a Windows light forwarder..........................................................132
Migrate a *nix light forwarder..................................................................133
Troubleshoot forwarding................................................................................136
Troubleshoot the universal forwarder with Splunk Enterprise.................136
Release Notes..................................................................................................138
Known issues..........................................................................................138
Fixed issues............................................................................................139
Third-party software................................................................................139
ii
Introducing the universal forwarder
The universal forwarder
About the universal forwarder
The universal forwarder collects data from a data source or another forwarder
and sends it to a forwarder or a Splunk deployment. With a universal forwarder,
you can send data to Splunk Enterprise, Splunk Light, or Splunk Cloud. It also
replaces the Splunk Enterprise light forwarder. The universal forwarder is
available as a separate installation package.
The universal forwarder offers advantages over using a heavy or light
forwarder. The most notable benefit is that it uses significantly fewer hardware
resources than other Splunk software products. It can, for example, coexist on a
host that runs a Splunk Enterprise instance. It also is more scalable than the
other Splunk products, as you can install thousands of universal forwarders with
little impact on network and host performance.
Another benefit is its availability for installation on many diverse computing
platforms and architectures. You can install it on more platforms than you can
Splunk Enterprise.
The universal forwarder includes only the essential components that it needs to
forward data to other Splunk platform instances. While it does not have a Web
interface, you can still configure, manage, and scale it by editing configuration
files or by using the Forwarder Management or Distributed Management Console
interfaces in Splunk Web.
This manual discusses the universal forwarder
This manual discusses the universal forwarder and how to plan, download,
install, and configure it. There are two other types of forwarders. To learn about
heavy and light forwarders and how they forward data, see About forwarding and
receiving data in the Forwarding Data Manual.
To achieve higher performance and a lighter resource footprint, the universal
forwarder has a subset of the functionality provided by a full Splunk deployment,
specifically:
1
Cannot search or index data.•
Cannot send alerts.•
Does not parse incoming data, except in certain cases, such as structured
data or some forms of Windows data.
•
Cannot send data to syslog servers as it has no syslog pipeline.•
Does not include a version of Python.•
How the universal forwarder compares to the light forwarder
The light forwarder is a full Splunk instance with certain features that have been
disabled to achieve a smaller resource footprint. The universal forwarder differs
from the light forwarder in the following ways:
It puts less load on the host CPU, uses less memory, and has a smaller
disk space footprint.
•
It cannot be converted to function as a heavy forwarder or other Splunk
Enterprise role.
•
It does not have Splunk Web, which means that you cannot perform any
configuration with that user interface.
•
The light forwarder was deprecated in Splunk Enterprise version 6.0, which
means that support for it can be removed in a future version of Splunk software.
When you install the universal forwarder, you can migrate from an existing light
forwarder that runs version 4.0 or later. See Migrate a Windows light forwarder or
Migrate a *nix light forwarder for details.
Information on Windows third-party binaries that ship with the
universal forwarder
For information on third-party Windows binaries provided with the Windows
version of the universal forwarder, see Information on Windows third-party
binaries distributed with Splunk Enterprise in the Splunk Enterprise Installation
Manual.
For information about running the universal forwarder in Windows Safe Mode,
see Splunk Enterprise Architecture and Processes also in the Installation
Manual.
2
剩余141页未读,继续阅读
yayanniu321
- 粉丝: 0
- 资源: 2
上传资源 快速赚钱
- 我的内容管理 收起
- 我的资源 快来上传第一个资源
- 我的收益 登录查看自己的收益
- 我的积分 登录查看自己的积分
- 我的C币 登录后查看C币余额
- 我的收藏
- 我的下载
- 下载帮助
会员权益专享
最新资源
- stc12c5a60s2 例程
- Android通过全局变量传递数据
- c++校园超市商品信息管理系统课程设计说明书(含源代码) (2).pdf
- 建筑供配电系统相关课件.pptx
- 企业管理规章制度及管理模式.doc
- vb打开摄像头.doc
- 云计算-可信计算中认证协议改进方案.pdf
- [详细完整版]单片机编程4.ppt
- c语言常用算法.pdf
- c++经典程序代码大全.pdf
- 单片机数字时钟资料.doc
- 11项目管理前沿1.0.pptx
- 基于ssm的“魅力”繁峙宣传网站的设计与实现论文.doc
- 智慧交通综合解决方案.pptx
- 建筑防潮设计-PowerPointPresentati.pptx
- SPC统计过程控制程序.pptx
资源上传下载、课程学习等过程中有任何疑问或建议,欢迎提出宝贵意见哦~我们会及时处理!
点击此处反馈
安全验证
文档复制为VIP权益,开通VIP直接复制
信息提交成功
评论0