The Universal Forwarder for ARM is a dedicated Splunk package for Linux and ARM based systems where data needs to be collected directly from devices such as the Raspberry Pi.
Raspberry Pi is a trademark of the Raspberry Pi Foundation.
This forwarder is lightweight, secure and can be installed on Raspberry Pi to provide real-time data collection from just about any local source. Use the Universal Forwarder to monitor local files, grab performance metrics from local resources such as the CPU and memory, or watch the file system for configuration, permissions and attribute changes. Finally, you can use Splunk’s scripted input mechanism to monitor any sensor or peripheral device attached to your Pi and transmit its values over the network to Splunk Enterprise, Splunk Cloud or Splunk Storm.
For basic documentation on installing and configuring Splunk Forwarders, please check out our universal forwarder documentation. For those completely new to Splunk, please check out our full documentation, and feel free to download a free copy of Splunk for your laptop or laboratory!
If you have used this forwarder for any interesting or extraordinary uses, we’d love to hear about them (Splunk in space anyone?). In the meantime, here are a few interesting projects highlighting cool things to do with your Raspberry Pi, Splunk them all!
Raspberry Pi in space (ok, near space, but who cares!)
Sonic Pi (first one to use TRANSACTION command to show difference between Queen’s ‘Under Pressure’ and Vanilla Ice’s ‘Ice Ice Baby’ wins a t-shirt, a Splunk pony, and a Babbage bear)