How To Install And Integrate Splunk Universal Forwarder on Windows
How To Install And Integrate Splunk Universal Forwarder on Windows
Splunk is a SIEM solution that allows us to collect, analyze, and correlate logs in a centralized server in real-time. This video will cover installing Splunk on Windows and configuring different log sources into Splunk.
The steps are:
Install and Integrate the Universal Forwarder
Integrating Windows Event Logs
First, we will configure the receiver on Splunk so the forwarder knows where to send the data.
It will show multiple options to configure both forwarding and receiving. As we want to receive data from the Windows Endpoint, we will click on Configure receiving and then proceed by configuring a new receiving port.
By default, the Splunk instance receives data from the forwarder on port 9997.
Installing Splunk Forwarder is very straightforward. First, we will download the latest forwarder from the official website.
We must specify the server’s IP address and port number to ensure that our Splunk instance gets the logs from this host. By default, Splunk listens on port 9997 for any incoming traffic.
Then we have to configure Splunk to receive Event Logs from this host and configure the forwarder to collect Event Logs from the host and send them to the Splunk Indexer.
🌸 Support channel & make donation :
https://www.paypal.me/aminenina/10
🌸 Subscribe for more videos :
Youtube: / aminosninatos
🌸 Follow me On Social Media
Facebook : / aminosninatos
***********************************************************************
🌸 How To Install And Integrate Splunk Universal Forwarder In Linux
• How To Install And Integrate Splunk U...
🌸 Cisco ASA Visualization in Splunk
• Cisco ASA Visualization in Splunk
🌸 Cisco ASA Splunk Basic Searching & Reporting
• Cisco ASA Splunk Basic Searching & Re...
🌸 How To Configure Splunk As Syslog Server for Cisco ASA
• How To Configure Splunk As Syslog Ser...
🌸 Cisco ISE Configuring TACACS+ Authentication for CISCO ASA
• Cisco ISE Configuring TACACS+ Authen...
🌸 How To Configure Cisco ASA for Sending Syslog Messages
• How To Configure Cisco ASA for Sendin...
🌸 Cisco ASA Basic Troubleshooting Commands
• Cisco ASA Basic Troubleshooting Commands
🌸 Cisco ASA TCP Connection Flags Explained
• Cisco ASA TCP Connection Flags Explained
🌸 Cisco ASA Firewall Packet Tracer for Network Troubleshooting
• Cisco ASA Firewall Packet Tracer for ...
🌸 How to execute Linux Commands on Cisco IOS
• How to execute Linux Commands on Cisc...
🌸 How to configure AAA authentication on Cisco IOS
• How to configure AAA authentication o...
🌸 How to protect Cisco devices against DoS attacks
• How to protect Cisco devices against ...
🌸 How To protect Cisco Devices against CDP Flood Attack
• How To protect Cisco Devices against ...
🌸 How to prevent SNMP Attack on Cisco IOS devices
• How to prevent SNMP Attack on Cisco I...
🌸 How to protect Cisco Devices against HSRP Attack
• How to protect Cisco Devices against ...
🌸 How to protect Cisco Devices against DHCP Denial of service
• How to protect Cisco Devices against ...
🌸 How to protect Cisco Devices against ARP poisoning attack
• How to protect Cisco Devices against ...
🌸 How to protect Cisco Devices against Vlan Hopping Attack
• How to protect Cisco Devices against ...
🌸How to protect Cisco Devices against SSH brute force attack
• How to protect Cisco Devices against ...
🌸 What ia the difference between Cisco IOS and IOS XR
• What ia the difference between Cisco ...
🌸 How to exploit Cisco Router using RouterSploit Framework
• How to exploit Cisco Router using Rou...
🌸 How to pentest Cisco Devices using cisco-torch tool
• How to pentest Cisco Devices using ci...
🌸 How to exploit Cisco Devices TFTP Server
• How to exploit Cisco Devices TFTP Server
🌸 How to exploit Cisco Devices SNMP using Kali Linux
• How to exploit Cisco Devices SNMP usi...
🌸Cisco configuration Archive & Rollback Feature
• Cisco configuration Archive & Rollbac...
***********************************************************************
#splunk #microsoft #windows
