https://community.splunk.com/t5/Getting-Data-In/UF-StreamForwarder-8-1-0-issue/m-p/617416#M106602 <P>Soo I have been able to setup and create the different monitors for my universal forwarder. Im working in a test environment so I dont need ssl, however I am attempting to monitor change to a ubuntu 16.04 via the universal forwarder. the data is pretty sparse, i initially thought it was because there is no user interaction.&nbsp; Now I get some logs but i also get a 500 internal web error . any idea on the cause of this ? and why am I not getting the logs from tmp or user access logs ?&nbsp;<BR /><BR /></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="socks_0-1666032246209.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/22043i9C0D3C429EDB78C3/image-size/medium?v=v2&amp;px=400" role="button" title="socks_0-1666032246209.png" alt="socks_0-1666032246209.png" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">socks_0-1666032246209.png</span></span></P><P>&nbsp;</P> Mon, 17 Oct 2022 18:44:33 GMT socks 2022-10-17T18:44:33Z https://community.splunk.com/t5/Getting-Data-In/UF-StreamForwarder-8-1-0-issue/m-p/617416#M106602 <P>Soo I have been able to setup and create the different monitors for my universal forwarder. Im working in a test environment so I dont need ssl, however I am attempting to monitor change to a ubuntu 16.04 via the universal forwarder. the data is pretty sparse, i initially thought it was because there is no user interaction.&nbsp; Now I get some logs but i also get a 500 internal web error . any idea on the cause of this ? and why am I not getting the logs from tmp or user access logs ?&nbsp;<BR /><BR /></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="socks_0-1666032246209.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/22043i9C0D3C429EDB78C3/image-size/medium?v=v2&amp;px=400" role="button" title="socks_0-1666032246209.png" alt="socks_0-1666032246209.png" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">socks_0-1666032246209.png</span></span></P><P>&nbsp;</P> Mon, 17 Oct 2022 18:44:33 GMT https://community.splunk.com/t5/Getting-Data-In/UF-StreamForwarder-8-1-0-issue/m-p/617416#M106602 socks 2022-10-17T18:44:33Z