https://community.splunk.com/t5/Getting-Data-In/Getting-data-into-Splunk-for-F5/m-p/107497#M97593 <P>We've configured the F5 ASM device to send syslogs to Splunk via TCP 514. Is there an extra piece of configuration that needs to be done to get Splunk picking up the data?</P> Wed, 22 Dec 2010 02:00:48 GMT nvmurali 2010-12-22T02:00:48Z https://community.splunk.com/t5/Getting-Data-In/Getting-data-into-Splunk-for-F5/m-p/107497#M97593 <P>We've configured the F5 ASM device to send syslogs to Splunk via TCP 514. Is there an extra piece of configuration that needs to be done to get Splunk picking up the data?</P> Wed, 22 Dec 2010 02:00:48 GMT https://community.splunk.com/t5/Getting-Data-In/Getting-data-into-Splunk-for-F5/m-p/107497#M97593 nvmurali 2010-12-22T02:00:48Z https://community.splunk.com/t5/Getting-Data-In/Getting-data-into-Splunk-for-F5/m-p/107498#M97594 <P>First your TCP data input sourcetype need to be manual and set to asm_log.</P> <P>The app has many scheduled searches, including some that feed the summary index then you need to wait they kick off and summary index being filled before things shows up in dashboard.</P> Wed, 22 Dec 2010 02:11:33 GMT https://community.splunk.com/t5/Getting-Data-In/Getting-data-into-Splunk-for-F5/m-p/107498#M97594 MarioM 2010-12-22T02:11:33Z