topic Re: Log checking in Getting Data In

Log checking

sushmitha_mj — Fri, 27 Mar 2015 21:19:36 GMT

What command should I use to check spluk logs in a linux system?

And where should I run this command?

vincenteous — Sat, 28 Mar 2015 09:56:40 GMT

This "logs" you're talking about, are they the one to check the state and errors in your Splunk instance? Or are they something else?

esix_splunk — Sat, 28 Mar 2015 10:36:00 GMT

In Splunk : search for "index=_internal" - This will give you all internal Splunk logs on your instance(s).

Alternatively, and old school, you can look in the $splunk_home$|/opt/splunk/var/log/splunk/ folder and grep through the logs.