https://community.splunk.com/t5/Getting-Data-In/How-to-configure-OSX-Syslogd/m-p/190967#M38017 <P>Hi to all,</P> <P>I've tried to configure my OSX Splunk server so it will accept data from the syslog deamon (see: <A href="https://wiki.splunk.com/Community:HowTo_Configure_Mac_OS_X_Syslog_To_Forward_Data">https://wiki.splunk.com/Community:HowTo_Configure_Mac_OS_X_Syslog_To_Forward_Data</A>).</P> <P>I've edited the /etc/syslog.conf file and added "<EM>.</EM> <TAB><TAB> x.x.x.x". (Where x.x.x.x is the IP of my machine where Splunk should be listening).</TAB></TAB></P> <P>After that, I stopped and restarted the Syslog Deamon (as explained in the tutorial).</P> <P>When I log into Splunk, there is no data. Splunk tells me: "waiting for data".<BR /> Do I need to configure Splunk to "receive" the data? And how do I do that?</P> <P>Thanks in advance!</P> Fri, 27 Dec 2013 11:58:48 GMT splunkminiuser 2013-12-27T11:58:48Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-OSX-Syslogd/m-p/190967#M38017 <P>Hi to all,</P> <P>I've tried to configure my OSX Splunk server so it will accept data from the syslog deamon (see: <A href="https://wiki.splunk.com/Community:HowTo_Configure_Mac_OS_X_Syslog_To_Forward_Data">https://wiki.splunk.com/Community:HowTo_Configure_Mac_OS_X_Syslog_To_Forward_Data</A>).</P> <P>I've edited the /etc/syslog.conf file and added "<EM>.</EM> <TAB><TAB> x.x.x.x". (Where x.x.x.x is the IP of my machine where Splunk should be listening).</TAB></TAB></P> <P>After that, I stopped and restarted the Syslog Deamon (as explained in the tutorial).</P> <P>When I log into Splunk, there is no data. Splunk tells me: "waiting for data".<BR /> Do I need to configure Splunk to "receive" the data? And how do I do that?</P> <P>Thanks in advance!</P> Fri, 27 Dec 2013 11:58:48 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-OSX-Syslogd/m-p/190967#M38017 splunkminiuser 2013-12-27T11:58:48Z https://community.splunk.com/t5/Getting-Data-In/How-to-configure-OSX-Syslogd/m-p/190968#M38018 <P>To receive syslog events directly you need to tell Splunk to listen to them: <A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports">http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports</A></P> Fri, 27 Dec 2013 13:28:02 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-configure-OSX-Syslogd/m-p/190968#M38018 martin_mueller 2013-12-27T13:28:02Z