Splunking files on Windows boxes
October 23, 2007 6:04 AM Subscribe
Getting Splunk running on Solaris 5.8, with log files on Windows boxes.
posted by ajp to computers & internet (2 answers total)
So I've installed Splunk on a Solaris 5.8 box, and now I need to get some data into it. We have a large amount of Windows servers, among other things, with Tomcat logs that I'd love to get into Splunk. People currently remote desktop onto the servers and peruse the logs in Notepad.... ugh!
How best to do this?
It seems that the most obvious way is to mount the Windows drives using SaMBa so Splunk considers them to be locally hosted files (albeit from another server).
Any other way? The less painful, the better.
Let's assume disk space and network bandwidth aren't an issue. I'm just new to Splunk and not too sure of my options. I did RTFM but can't see much specifically about this. I'm sure it's there, somewhere painfully obvious.