Hi guys,
I'm using a Splunk Enterprise on my own server. Recently we have played with the idea of moving to "Splunk Light" cloud service and I'm trying to configure a test environment on the "Splunk Light" cloud, and I have some difficulties.
1. Originally, I'm sending data from my application servers to my Splunk server via a TCP port to the Splunk server IP (without Forwarder). Where can I find the IP or FQDN of the "Splunk Light" to send the data to? I cannot find it anywhere.
2. In my current Splunk server, I use TCP Local Data Inputs. In "Splunk Light" cloud TCP Local Data is not listed as an option for Local TCP Data Inputs. So, where should I add the port listener?
3. I need to filter out some data I receive. In my own Splunk server I'm using "transforms.conf" and "props.conf" files. How do I access these files in the "Splunk Light" service, or alternatively, is there a way to filter out data from the "Splunk Light" management board?
Thanks for your help.
Michael
↧