topic Best way to debug indexing based on props.conf in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Best-way-to-debug-indexing-based-on-props-conf/m-p/105119#M22142 <P>Im having issues and I know its related to props.conf, but I have over 100 regexes and I dont want to test each one, is there a log file that I can follow to monitor why its not indexing?</P> <P>Iv tried using Splunkd.log, but it doesnt say much about my current issue.</P> Mon, 29 Oct 2012 04:14:20 GMT Dark_Ichigo 2012-10-29T04:14:20Z Best way to debug indexing based on props.conf https://community.splunk.com/t5/Getting-Data-In/Best-way-to-debug-indexing-based-on-props-conf/m-p/105119#M22142 <P>Im having issues and I know its related to props.conf, but I have over 100 regexes and I dont want to test each one, is there a log file that I can follow to monitor why its not indexing?</P> <P>Iv tried using Splunkd.log, but it doesnt say much about my current issue.</P> Mon, 29 Oct 2012 04:14:20 GMT https://community.splunk.com/t5/Getting-Data-In/Best-way-to-debug-indexing-based-on-props-conf/m-p/105119#M22142 Dark_Ichigo 2012-10-29T04:14:20Z Re: Best way to debug indexing based on props.conf https://community.splunk.com/t5/Getting-Data-In/Best-way-to-debug-indexing-based-on-props-conf/m-p/105120#M22143 <P>Specifically, what is the issue you are having? You can enable debug logging on splunk, but I am not sure if is necessary for your issue. More information on debug logging here:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/Troubleshooting/Enabledebuglogging#Enable_debug_logging_on_all_of_splunkd.log">http://docs.splunk.com/Documentation/Splunk/4.3.4/Troubleshooting/Enabledebuglogging#Enable_debug_logging_on_all_of_splunkd.log</A></P> Mon, 29 Oct 2012 17:32:26 GMT https://community.splunk.com/t5/Getting-Data-In/Best-way-to-debug-indexing-based-on-props-conf/m-p/105120#M22143 splunkIT 2012-10-29T17:32:26Z Re: Best way to debug indexing based on props.conf https://community.splunk.com/t5/Getting-Data-In/Best-way-to-debug-indexing-based-on-props-conf/m-p/105121#M22144 <P>I just went through each regex one by one and found the odd one out, dodgy and took over 5 hours, but I got it.</P> Thu, 01 Nov 2012 00:00:04 GMT https://community.splunk.com/t5/Getting-Data-In/Best-way-to-debug-indexing-based-on-props-conf/m-p/105121#M22144 Dark_Ichigo 2012-11-01T00:00:04Z