I've figured it out and happy to share it to the community! To people who use Windows VM instance (mine is Windows server 2012 r2) 1. After installing Splunk, it will not automatically listen to UDP port 514 2. to confirm, you need to open a cmd to C:\Program Files\Splunk\bin, then type splunk add u...

Hi Jotne, I tried to test if my VM windows instance cannot received UDP packets from other public ip address using packet sender app. As per testing, I could receive UDP packets (please see attached testing here https://ibb.co/7QjVH5X ). Is there a way to check/troubleshoot the Splunk app? I've trie...

Thank you! I'll try to install a Linux VM instance instead. Very noted on quoting reply as well. Cheers!

Hi, I'm not sure how you will test it using Windows Machine. I've tried to set up Splunk on my local PC (with ip of 192.168.0.3), update the mikrotik logserver to that IP and can confirm that I'm getting data from mikrotik. However, if I change to the Windows VM (ip - 32.x.x.x), I didn't receive any...

Hi there, I'm using this and very thankful to this app. Currently, my splunk is installed on my local machine (personal PC), and I'm planning to deploy Splunk on Windows VM to access it anywhere. I was able to set it up access the web UI publicly. However, I'm not getting any data from my Mikrotik. ...