<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic error while giving path for different servers in Security</title>
    <link>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57030#M13934</link>
    <description>&lt;P&gt;hi my scenario is i am having different servers in which same services are running like httpd, maillog, errorlog and i want to see logs of all these servers. i have tried to give path for both the servers for seeing it access logs as /var/logs/httpd/access_logs and it gave me the following error.&lt;/P&gt;

&lt;P&gt;"Encountered the following error while trying to save: In handler 'monitor': Cannot create another input with the name "/var/log/httpd/access_log", one already exists."&lt;/P&gt;

&lt;P&gt;how can i see the same logs of two different servers. &lt;/P&gt;

&lt;P&gt;plz help me in this regard.&lt;/P&gt;

&lt;P&gt;thank u
Prakash&lt;/P&gt;</description>
    <pubDate>Thu, 10 Mar 2011 16:05:47 GMT</pubDate>
    <dc:creator>rupesh212121</dc:creator>
    <dc:date>2011-03-10T16:05:47Z</dc:date>
    <item>
      <title>error while giving path for different servers</title>
      <link>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57030#M13934</link>
      <description>&lt;P&gt;hi my scenario is i am having different servers in which same services are running like httpd, maillog, errorlog and i want to see logs of all these servers. i have tried to give path for both the servers for seeing it access logs as /var/logs/httpd/access_logs and it gave me the following error.&lt;/P&gt;

&lt;P&gt;"Encountered the following error while trying to save: In handler 'monitor': Cannot create another input with the name "/var/log/httpd/access_log", one already exists."&lt;/P&gt;

&lt;P&gt;how can i see the same logs of two different servers. &lt;/P&gt;

&lt;P&gt;plz help me in this regard.&lt;/P&gt;

&lt;P&gt;thank u
Prakash&lt;/P&gt;</description>
      <pubDate>Thu, 10 Mar 2011 16:05:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57030#M13934</guid>
      <dc:creator>rupesh212121</dc:creator>
      <dc:date>2011-03-10T16:05:47Z</dc:date>
    </item>
    <item>
      <title>Re: error while giving path for different servers</title>
      <link>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57031#M13935</link>
      <description>&lt;P&gt;Basically, you do:&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Server 1 (Indexer - MASTER)&lt;/STRONG&gt;&lt;/P&gt;

&lt;OL&gt;
&lt;LI&gt;Manager » Data inputs » Files &amp;amp; Directories » Add New --&amp;gt; */var/log/httpd/access_log*&lt;/LI&gt;
&lt;LI&gt;Manager » Forwarding and receiving » Receive data » Add New --&amp;gt; &lt;EM&gt;9997&lt;/EM&gt;&lt;/LI&gt;
&lt;/OL&gt;

&lt;P&gt;&lt;STRONG&gt;Server 2 (Forwarder - CLIENT)&lt;/STRONG&gt;&lt;/P&gt;

&lt;OL&gt;
&lt;LI&gt;Manager » Data inputs » Files &amp;amp; Directories » Add New --&amp;gt; */var/log/httpd/access_log*&lt;/LI&gt;
&lt;LI&gt;Manager » Forwarding and receiving » Forward data » Add New --&amp;gt; &amp;lt; &lt;EM&gt;ip.from.your.master:9997&lt;/EM&gt; &amp;gt;&lt;/LI&gt;
&lt;/OL&gt;

&lt;P&gt;Please, read through following docs as well:&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;&lt;A href="http://www.splunk.com/base/Documentation/4.1.7/admin/AboutForwardingAndReceiving" rel="nofollow"&gt;http://www.splunk.com/base/Documentation/4.1.7/admin/AboutForwardingAndReceiving&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;A href="http://www.splunk.com/base/Documentation/4.1.7/admin/Enableforwardingandreceiving" rel="nofollow"&gt;http://www.splunk.com/base/Documentation/4.1.7/admin/Enableforwardingandreceiving&lt;/A&gt;&lt;/LI&gt;
&lt;/UL&gt;</description>
      <pubDate>Thu, 10 Mar 2011 18:29:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57031#M13935</guid>
      <dc:creator>LCM</dc:creator>
      <dc:date>2011-03-10T18:29:26Z</dc:date>
    </item>
    <item>
      <title>Re: error while giving path for different servers</title>
      <link>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57032#M13936</link>
      <description>&lt;P&gt;but it is not accepting the path as it is saying the path already exist.&lt;/P&gt;</description>
      <pubDate>Thu, 17 Mar 2011 12:27:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57032#M13936</guid>
      <dc:creator>rupesh212121</dc:creator>
      <dc:date>2011-03-17T12:27:23Z</dc:date>
    </item>
    <item>
      <title>Re: error while giving path for different servers</title>
      <link>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57033#M13937</link>
      <description>&lt;P&gt;That error means you already configured that path for monitoring then. There is no reason to configure it twice. Can you double check, if you entered that path before&lt;/P&gt;</description>
      <pubDate>Thu, 17 Mar 2011 13:22:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/error-while-giving-path-for-different-servers/m-p/57033#M13937</guid>
      <dc:creator>LCM</dc:creator>
      <dc:date>2011-03-17T13:22:27Z</dc:date>
    </item>
  </channel>
</rss>

