https://community.splunk.com/t5/Security/Troubleshoot-data-not-getting-to-splunk/m-p/473972#M10981 <P>I'm sending TCP syslog traffic on a specific port to splunk. The input exists and I am sending it to an index I have access to. I have confirmed that data is being sent to splunk but looking at the flow traffic on my network and running tcpdump on splunk.</P> <P>The TCP traffic is configured to only accept traffic which is encrypted with a certificate, which I believe is why it is not working, how could iI confirm this using only the _internal logs or through running searches/commands on the search head or cluster ? I do not have console access to the indexers.</P> <P>Thanks !</P> Mon, 09 Sep 2019 12:51:31 GMT rusty009 2019-09-09T12:51:31Z https://community.splunk.com/t5/Security/Troubleshoot-data-not-getting-to-splunk/m-p/473972#M10981 <P>I'm sending TCP syslog traffic on a specific port to splunk. The input exists and I am sending it to an index I have access to. I have confirmed that data is being sent to splunk but looking at the flow traffic on my network and running tcpdump on splunk.</P> <P>The TCP traffic is configured to only accept traffic which is encrypted with a certificate, which I believe is why it is not working, how could iI confirm this using only the _internal logs or through running searches/commands on the search head or cluster ? I do not have console access to the indexers.</P> <P>Thanks !</P> Mon, 09 Sep 2019 12:51:31 GMT https://community.splunk.com/t5/Security/Troubleshoot-data-not-getting-to-splunk/m-p/473972#M10981 rusty009 2019-09-09T12:51:31Z