The Universal Forwarder is a dedicated Splunk package used wherever data needs to be collected directly from endpoints. You can use this program to monitor local application log files, capture the output of status commands on a schedule, grab performance metrics from virtual or non-virtual sources or watch the file system for configuration, permissions and attribute changes.
Comments