topic unifi USG syslog to Splunk enterprise in Getting Data In

unifi USG syslog to Splunk enterprise

wbarrett12 — Wed, 23 May 2018 11:55:23 GMT

Good Morning,

I configured my Unifi USG to send logs to the splunk server on udp 514, created a receiver udp 514. I have verified the traffic is getting to the server but i am not seeing the raw events on the splunk server.

Re: unifi USG syslog to Splunk enterprise

DalJeanis — Wed, 23 May 2018 14:25:08 GMT

@wbarrett12 - Answers is a forum. Questions and responses are public so that everyone can learn from them.

Please do not post private email addresses or request members to send you information privately.

Re: unifi USG syslog to Splunk enterprise

wbarrett12 — Wed, 23 May 2018 15:17:25 GMT

Why thank you very much, I did not know that. Do you have a answer to my questions or were you just forum floating

Re: unifi USG syslog to Splunk enterprise

DalJeanis — Wed, 23 May 2018 16:20:14 GMT

@wbarrett12 - Welcome to the community. I'm one of the moderators. Sorry for the confusion. Please ask your question again in a new post without the email, and the moderators will release it for the community to respond to. While I updated this one for you, the email would still be visible in the history, which is a no-no, so we had to pop it back into the moderation queue. As soon as your new question post goes live, we will delete this one.

Re: unifi USG syslog to Splunk enterprise

wbarrett12 — Wed, 23 May 2018 18:03:01 GMT

Thank you