<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Splunk configuration with UberAgent in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Is-there-a-step-by-step-setup-link-for-Splunk-configuration-with/m-p/622414#M107147</link>
    <description>&lt;P&gt;How do you see events piling up in the index if you can't search the index?&amp;nbsp; Does your role have read permission on the index?&amp;nbsp; How are you trying to get the data into a search or dashboard?&amp;nbsp; Please share the SPL.&lt;/P&gt;</description>
    <pubDate>Tue, 29 Nov 2022 13:47:28 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2022-11-29T13:47:28Z</dc:date>
    <item>
      <title>Is there a step by step setup link for Splunk configuration with UberAgent?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Is-there-a-step-by-step-setup-link-for-Splunk-configuration-with/m-p/622349#M107139</link>
      <description>&lt;P&gt;Hi All,&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We are tring to collect the Desktop experience data in Splunk using the Uber Agent.&lt;/P&gt;
&lt;P&gt;We have installed the Splunk Enterprise trial setup on a Windows Machine and the same machine hosts the Uberagent as well as an additional machine has uber agent sending logs to this server.&lt;/P&gt;
&lt;P&gt;Due to the message popup we created an index for incoming uberagent data and can see the events piling up in that index; but failed to get them populated under any dashboard or searches.&lt;/P&gt;
&lt;P&gt;Please share if there exists a step by step setup link for this architecture or suggest if there needs to be additonal configuration done to support UberAgent logs.&lt;/P&gt;</description>
      <pubDate>Tue, 29 Nov 2022 14:02:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Is-there-a-step-by-step-setup-link-for-Splunk-configuration-with/m-p/622349#M107139</guid>
      <dc:creator>jasreets</dc:creator>
      <dc:date>2022-11-29T14:02:37Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk configuration with UberAgent</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Is-there-a-step-by-step-setup-link-for-Splunk-configuration-with/m-p/622414#M107147</link>
      <description>&lt;P&gt;How do you see events piling up in the index if you can't search the index?&amp;nbsp; Does your role have read permission on the index?&amp;nbsp; How are you trying to get the data into a search or dashboard?&amp;nbsp; Please share the SPL.&lt;/P&gt;</description>
      <pubDate>Tue, 29 Nov 2022 13:47:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Is-there-a-step-by-step-setup-link-for-Splunk-configuration-with/m-p/622414#M107147</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2022-11-29T13:47:28Z</dc:date>
    </item>
  </channel>
</rss>

