https://community.splunk.com/t5/Splunk-Enterprise/Splunk-app-for-Logbinder-Event-Entries-empty/m-p/448407#M1551 <P>Hi guys,</P> <P>I installed Supercharger, Splunk and Splunk app for Logbinder in order to configure log forwarders and have them visualized within Splunk (like here <A href="https://support.logbinder.com/SuperchargerKB/50135/8-Install-Supercharger-with-Splunk-Light-and-the-Splunk-App-for-LOGbinder">https://support.logbinder.com/SuperchargerKB/50135/8-Install-Supercharger-with-Splunk-Light-and-the-Splunk-App-for-LOGbinder</A>)<BR /> So far everything worked flawless, Events are forwarded and collected but when looking at the event entries in Splunk they are not showing any data:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5993i5BFBFEB8D614E326/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>When looking inside the forwarded Events everything looks as it should, only what is displayed in Splunk is wrong.<BR /> Help really appreciated!</P> <P>Thanks and Regards</P> <P>One additional question: The forwarded events are stored in a event file. Are they also stored within the SQL DB which Logbinder creates? Only relying on this file seems a bit crazy to me? How is Splunk crawling this file? </P> Mon, 29 Oct 2018 12:03:06 GMT juerchri 2018-10-29T12:03:06Z https://community.splunk.com/t5/Splunk-Enterprise/Splunk-app-for-Logbinder-Event-Entries-empty/m-p/448407#M1551 <P>Hi guys,</P> <P>I installed Supercharger, Splunk and Splunk app for Logbinder in order to configure log forwarders and have them visualized within Splunk (like here <A href="https://support.logbinder.com/SuperchargerKB/50135/8-Install-Supercharger-with-Splunk-Light-and-the-Splunk-App-for-LOGbinder">https://support.logbinder.com/SuperchargerKB/50135/8-Install-Supercharger-with-Splunk-Light-and-the-Splunk-App-for-LOGbinder</A>)<BR /> So far everything worked flawless, Events are forwarded and collected but when looking at the event entries in Splunk they are not showing any data:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/5993i5BFBFEB8D614E326/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>When looking inside the forwarded Events everything looks as it should, only what is displayed in Splunk is wrong.<BR /> Help really appreciated!</P> <P>Thanks and Regards</P> <P>One additional question: The forwarded events are stored in a event file. Are they also stored within the SQL DB which Logbinder creates? Only relying on this file seems a bit crazy to me? How is Splunk crawling this file? </P> Mon, 29 Oct 2018 12:03:06 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-app-for-Logbinder-Event-Entries-empty/m-p/448407#M1551 juerchri 2018-10-29T12:03:06Z