https://community.splunk.com/t5/Getting-Data-In/No-data-coming-into-Splunk-from-sources/m-p/390738#M95191 <P>I rebooted the splunk syslog server. Since then I'm only receiving data into the indexers from sources that have forwarders installed. I am not receiving any data from all other sources, for example networking equipment. I've also rebooted the master, indexers, and search-head. Did I miss something after rebooting the splunk syslog server? Any guidance is appreciated. </P> Fri, 24 May 2019 15:02:11 GMT genesissplunk 2019-05-24T15:02:11Z https://community.splunk.com/t5/Getting-Data-In/No-data-coming-into-Splunk-from-sources/m-p/390738#M95191 <P>I rebooted the splunk syslog server. Since then I'm only receiving data into the indexers from sources that have forwarders installed. I am not receiving any data from all other sources, for example networking equipment. I've also rebooted the master, indexers, and search-head. Did I miss something after rebooting the splunk syslog server? Any guidance is appreciated. </P> Fri, 24 May 2019 15:02:11 GMT https://community.splunk.com/t5/Getting-Data-In/No-data-coming-into-Splunk-from-sources/m-p/390738#M95191 genesissplunk 2019-05-24T15:02:11Z https://community.splunk.com/t5/Getting-Data-In/No-data-coming-into-Splunk-from-sources/m-p/390739#M95192 <P>Slightly confused with terminlogy of "Splunk Syslog Server". You mean the "syslog server" which has also got Splunk installed?<BR /> The way in which to do is</P> <OL> <LI>configure rsyslog/syslog-ng to capture the syslog data from networking equipment and log into file in the syslog server</LI> <LI>Install Splunk Universal Forwarder (or a HF) and send the data to Splunk indexers</LI> </OL> <P>For further help, you need to provide<BR /> 1. What type of Splunk software you have installed<BR /> 2. inputs.conf , outputs.conf, props.conf of your Forwarder server</P> Fri, 24 May 2019 21:07:06 GMT https://community.splunk.com/t5/Getting-Data-In/No-data-coming-into-Splunk-from-sources/m-p/390739#M95192 koshyk 2019-05-24T21:07:06Z