Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have made my ubuntu server a centralized log server...I have splunk installed in the /opt directory of the ubuntu server.

I have one of the another machines sending logs to this ubuntu server..In the splunk interface i have added in the network ports as UDP port 514...and also have added in the "file and directory" /var/log.

The client has also been configured properly...How do I show analysis of the logs??

share|improve this question

Could you confirm what you mean by "How do I show analysis of the logs??"

Splunk has lots of great documentation at

You may be most interested in the user manual:

Splunk won't just do everything magically:

In the same way that Google requires you to type search terms before it gives you what you're looking for, Splunk requires you to do the same.

share|improve this answer

You may consider using phpLogCon (which has been renamed sometime ago). Just Google "phplogcon" and you should find it, along with its new name. This, along with Apache, and the PHP extension, will let you review log files of different types using a web-based interface. It may be a good start for log reviewing......

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.