topic Re: Splunk 6.2/NetScaler 10.1 Configuration in All Apps and Add-ons

Splunk 6.2/NetScaler 10.1 Configuration

LouPetridish — Mon, 28 Sep 2020 19:56:41 GMT

Hello,

I have a NetScaler in my environment setup to send the Syslog files to Splunk 6.2. It's configured to send "all" of the events available. I can modify this later but I just want to see the data flow through into Splunk.

Currently when I look at the Splunk web console with the NetScaler App installed all I see is the "SSLLOG SSL_HANDSHAKE_SUCCESS" events. I would think it would send me everything that I included under all such as 'error', 'critical', 'emergency', 'warning'....

Any thoughts?

Thank you,
Luke

Re: Splunk 6.2/NetScaler 10.1 Configuration

LouPetridish — Mon, 11 May 2015 21:09:21 GMT

This can be closed out. I got it resolved. The handshakes show up because it's a ton of info. But if you actually start filtering things out you see a ton of information.

Sorry for the waste of time. I am new to a lot of this stuff.

Re: Splunk 6.2/NetScaler 10.1 Configuration

cshah2 — Fri, 22 Jan 2016 22:13:10 GMT

Hi Lou,

What App did you use for this. We are running on 10.5 version of NS and want to use an app to get field extractions in Splunk. However, the app I found online works only with 9.X release of NS. Appreciate your answer.