<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic HF syslog to indexer in Monitoring Splunk</title>
    <link>https://community.splunk.com/t5/Monitoring-Splunk/HF-syslog-to-indexer/m-p/697652#M10372</link>
    <description>&lt;P&gt;Hello members,&lt;/P&gt;&lt;P&gt;i'm struggling with something i have configured data inputs, and indexer name on the HF and makes the app pointing to Search Head &amp;amp; reporting, Also forwarded to logs from the other system as syslog data to Heavy forwarder&amp;nbsp;&lt;/P&gt;&lt;P&gt;i have configured also the same index on HF at the cluster master and pushed that to all indexers but when i'm looking for that index in SH ( Search Head ) there is no result&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;can someone help me please ...&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Wed, 28 Aug 2024 21:42:49 GMT</pubDate>
    <dc:creator>KhalidAlharthi</dc:creator>
    <dc:date>2024-08-28T21:42:49Z</dc:date>
    <item>
      <title>HF syslog to indexer</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/HF-syslog-to-indexer/m-p/697652#M10372</link>
      <description>&lt;P&gt;Hello members,&lt;/P&gt;&lt;P&gt;i'm struggling with something i have configured data inputs, and indexer name on the HF and makes the app pointing to Search Head &amp;amp; reporting, Also forwarded to logs from the other system as syslog data to Heavy forwarder&amp;nbsp;&lt;/P&gt;&lt;P&gt;i have configured also the same index on HF at the cluster master and pushed that to all indexers but when i'm looking for that index in SH ( Search Head ) there is no result&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;can someone help me please ...&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Wed, 28 Aug 2024 21:42:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/HF-syslog-to-indexer/m-p/697652#M10372</guid>
      <dc:creator>KhalidAlharthi</dc:creator>
      <dc:date>2024-08-28T21:42:49Z</dc:date>
    </item>
    <item>
      <title>Re: HF syslog to indexer</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/HF-syslog-to-indexer/m-p/697702#M10374</link>
      <description>&lt;P&gt;Please provide the config that you've implemented on HF for the described setup.&lt;/P&gt;</description>
      <pubDate>Thu, 29 Aug 2024 10:55:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/HF-syslog-to-indexer/m-p/697702#M10374</guid>
      <dc:creator>PaulPanther</dc:creator>
      <dc:date>2024-08-29T10:55:34Z</dc:date>
    </item>
    <item>
      <title>Re: HF syslog to indexer</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/HF-syslog-to-indexer/m-p/697707#M10376</link>
      <description>&lt;P&gt;can you check your direct messages&lt;/P&gt;</description>
      <pubDate>Thu, 29 Aug 2024 12:13:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/HF-syslog-to-indexer/m-p/697707#M10376</guid>
      <dc:creator>KhalidAlharthi</dc:creator>
      <dc:date>2024-08-29T12:13:51Z</dc:date>
    </item>
  </channel>
</rss>

