https://community.splunk.com/t5/Getting-Data-In/Where-to-start-debugging-why-Splunk-receiver-is-not-getting-data/m-p/107318#M22563 <P>There are some searches that might help you diagnose, see <A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Cantfinddata#Are_you_using_forwarders.3F">I can't find my data!</A> in the Troubleshooting Manual.</P> Mon, 02 Apr 2012 22:03:34 GMT ChrisG 2012-04-02T22:03:34Z https://community.splunk.com/t5/Getting-Data-In/Where-to-start-debugging-why-Splunk-receiver-is-not-getting-data/m-p/107317#M22562 <P>From this line in the <CODE>splunkd.log</CODE> it appears the forwarder and receiver are connected?</P> <PRE><CODE>/opt/splunkforwarder/var/log/splunk# vim splunkd.log 04-02-2012 19:54:28.351 +0000 INFO TcpOutputProc - Connected to idx=10.140.13.XX:9997 </CODE></PRE> <P>But I dont see any indication on the receiving splunk web application that it is receiving new data?</P> <P>Where should I begin debugging?</P> Mon, 02 Apr 2012 21:40:57 GMT https://community.splunk.com/t5/Getting-Data-In/Where-to-start-debugging-why-Splunk-receiver-is-not-getting-data/m-p/107317#M22562 boris 2012-04-02T21:40:57Z https://community.splunk.com/t5/Getting-Data-In/Where-to-start-debugging-why-Splunk-receiver-is-not-getting-data/m-p/107318#M22563 <P>There are some searches that might help you diagnose, see <A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Cantfinddata#Are_you_using_forwarders.3F">I can't find my data!</A> in the Troubleshooting Manual.</P> Mon, 02 Apr 2012 22:03:34 GMT https://community.splunk.com/t5/Getting-Data-In/Where-to-start-debugging-why-Splunk-receiver-is-not-getting-data/m-p/107318#M22563 ChrisG 2012-04-02T22:03:34Z