https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89951#M18652 <P>Firewall issue?</P> Mon, 15 Oct 2012 15:30:36 GMT Ayn 2012-10-15T15:30:36Z https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89950#M18651 <P>I am trying to send syslog data and logs from an ftp server using ports: 514,5151, and 2001. I made sure that the server running splunk has those ports open. I don't see any data coming in. IF I send the logs to another syslog server, I see data so log is being sent from the ftp server.</P> <P>ANy ideas why Splunk is not seeing the ftp information?</P> <P>Thanks</P> Mon, 15 Oct 2012 13:55:00 GMT https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89950#M18651 Kvista48 2012-10-15T13:55:00Z https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89951#M18652 <P>Firewall issue?</P> Mon, 15 Oct 2012 15:30:36 GMT https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89951#M18652 Ayn 2012-10-15T15:30:36Z https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89952#M18653 <P>Can you comment on how you're trying to search and what the inputs look like? Have you validated that the data is actually reaching the network interface with something like tcpdump?</P> Mon, 15 Oct 2012 20:35:39 GMT https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89952#M18653 jbsplunk 2012-10-15T20:35:39Z https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89953#M18654 <P>The host server has those ports open but, did you also enable the UDP data input on the same ports on the Splunk server in Manager / Data Inputs?</P> Mon, 15 Oct 2012 20:38:10 GMT https://community.splunk.com/t5/Getting-Data-In/Do-not-see-syslog-data-in-Splunk/m-p/89953#M18654 dmaislin_splunk 2012-10-15T20:38:10Z