syslog and auth.log will be forwarded by using Splunk Universal Forwarder

Splunk server - My laptop

Splunk Forwarder - Ubuntu EC2 instance

Downlading Splunk Universal Forwarder from official website

Copy wget link and download splunkforwarder

unzip .tgz file

tar xvzf splunkforwarder-9.4.0-6b4ebe426ca6-linux-amd64.tgz

Fire up the Splunk Forwarder

User name and PW setting required