https://community.splunk.com/t5/Getting-Data-In/Issue-with-monitoring-logs/m-p/672111#M112603 <P>Hey Guys,</P><P>I have a node js application and I used Winston to print out the log for our application. Ex(logger.info({responseStatus:200}). I am not using a log file and just simply printing out the log. I am not quite sure what's causing the issue here. The log event is working fine in other environments and displaying in the separate event log, so I can keep track of the event field name. But in the production environment, my logs are mixed with console.log and treated as one event instead. It looks something like this right here. (Just an example, but looks similar).</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sambaing_0-1702796946184.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/28554iFB241C759B9F1F80/image-size/medium?v=v2&amp;px=400" role="button" title="Sambaing_0-1702796946184.png" alt="Sambaing_0-1702796946184.png" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Sambaing_0-1702796946184.png</span></span></P><P>&nbsp;</P><P>I am new to Splunk Enterprise, and I am not quite sure where my configuration file is located. It's ok if there's no solution, but I would like to&nbsp;hear some advice from the expert from Splunk, on what may be causing this happening.</P><P>&nbsp;</P> Sun, 17 Dec 2023 07:16:02 GMT Sambaing 2023-12-17T07:16:02Z https://community.splunk.com/t5/Getting-Data-In/Issue-with-monitoring-logs/m-p/672111#M112603 <P>Hey Guys,</P><P>I have a node js application and I used Winston to print out the log for our application. Ex(logger.info({responseStatus:200}). I am not using a log file and just simply printing out the log. I am not quite sure what's causing the issue here. The log event is working fine in other environments and displaying in the separate event log, so I can keep track of the event field name. But in the production environment, my logs are mixed with console.log and treated as one event instead. It looks something like this right here. (Just an example, but looks similar).</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sambaing_0-1702796946184.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/28554iFB241C759B9F1F80/image-size/medium?v=v2&amp;px=400" role="button" title="Sambaing_0-1702796946184.png" alt="Sambaing_0-1702796946184.png" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Sambaing_0-1702796946184.png</span></span></P><P>&nbsp;</P><P>I am new to Splunk Enterprise, and I am not quite sure where my configuration file is located. It's ok if there's no solution, but I would like to&nbsp;hear some advice from the expert from Splunk, on what may be causing this happening.</P><P>&nbsp;</P> Sun, 17 Dec 2023 07:16:02 GMT https://community.splunk.com/t5/Getting-Data-In/Issue-with-monitoring-logs/m-p/672111#M112603 Sambaing 2023-12-17T07:16:02Z https://community.splunk.com/t5/Getting-Data-In/Issue-with-monitoring-logs/m-p/672181#M112606 <P>Hello&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/263403">@Sambaing</a>&nbsp;how to index these logs? Maybe your "source" field is not correctly defined.</P> Mon, 18 Dec 2023 11:05:38 GMT https://community.splunk.com/t5/Getting-Data-In/Issue-with-monitoring-logs/m-p/672181#M112606 splunkreal 2023-12-18T11:05:38Z