installation error in splunk client
i am using fc9
i installed centralized splunk server i trying to integrate splunk client
but i didn't get any client in my splunk server on webinterface pls guide me how integrate the client in my server
i folowde below steps
cd /opt
sudo wget 'http://www.splunk.com/index.php/download_track?file=3.4.8/linux/splunk-3.4.8-54309-Linux-i686.tgz&ac=&wget=true&name=wget&typed=releases'
sudo tar xvfz splunk-3.4.6-51113-Linux-i686.tgz
sudo splunk/bin/splunk start
sudo /opt/splunk/bin/splunk enable boot-start
sudo iptables -A INPUT -s ip.address1.to.allow -p tcp --dport 8000 -j ACCEPT
sudo iptables -A INPUT -s ip.address2.to.allow -p tcp --dport 8000 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 8000 -j DROP
in my clint system i edited
/etc/hosts
ip.address.of.splunkserver splunkserver
i edited /etc/syslog.conf:
# additional config for sending logs to splunk
*.info @splunksever
i loged in splunkserverip:8000
but i didn't get any hosts in my server pls guide me how to add the clints in my splunk server have i need any package in my client side pls any budy guide me
thanks in addvance
|