Example configuration to send events from Contrast's Universal Forwarder to Grafana Loki

Using Google GRR Rapid Response to analyze remote clients.

Configured a Splunk Universal Forwarder on a remote Ubuntu system to forward syslog and authentication logs to a central Splunk indexer. Includes setup steps, search queries, and incident response observations. Part of the 30-Day SOC Challenge.