https://community.splunk.com/t5/Getting-Data-In/Can-t-see-my-Syslog-Source/m-p/69615#M14139 <P>it CAN be TCP as well. You just need to make sure that you are sending the data as TCP though.</P> Fri, 15 Oct 2010 00:36:52 GMT Genti 2010-10-15T00:36:52Z https://community.splunk.com/t5/Getting-Data-In/Can-t-see-my-Syslog-Source/m-p/69613#M14137 <P>Real simple one this I'm sure.</P> <P>I want to monitor syslog of my router. I have gone to Manager-&gt;Data inputs-&gt;TCP Did port 514, host=IP, source type: Manual, syslog, Index: deafault</P> <P>This is literally all I have done. If I load up a simple syslog monitor tool then this gets logs from the server.</P> <P>I can't seem to view these logs anywhere though, it does show me any sources if I use the search app.</P> <P>Where have I gone wrong?</P> Wed, 13 Oct 2010 22:13:08 GMT https://community.splunk.com/t5/Getting-Data-In/Can-t-see-my-Syslog-Source/m-p/69613#M14137 microbyte 2010-10-13T22:13:08Z https://community.splunk.com/t5/Getting-Data-In/Can-t-see-my-Syslog-Source/m-p/69614#M14138 <P>Fixed, needs to be UDP!</P> Wed, 13 Oct 2010 22:27:25 GMT https://community.splunk.com/t5/Getting-Data-In/Can-t-see-my-Syslog-Source/m-p/69614#M14138 microbyte 2010-10-13T22:27:25Z https://community.splunk.com/t5/Getting-Data-In/Can-t-see-my-Syslog-Source/m-p/69615#M14139 <P>it CAN be TCP as well. You just need to make sure that you are sending the data as TCP though.</P> Fri, 15 Oct 2010 00:36:52 GMT https://community.splunk.com/t5/Getting-Data-In/Can-t-see-my-Syslog-Source/m-p/69615#M14139 Genti 2010-10-15T00:36:52Z