https://community.splunk.com/t5/Monitoring-Splunk/Missing-Internal-Logs-from-Server/m-p/705206#M10571 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/266281">@BRFZ</a>&nbsp;,</P><P>did you configured this server to send logs to the Indexers?</P><P>did you opened the firewall routes between this server and Indexers on the port 9997?</P><P>Make these checks.</P><P>Ciao.</P><P>Giuseppe</P> Mon, 25 Nov 2024 15:54:44 GMT gcusello 2024-11-25T15:54:44Z https://community.splunk.com/t5/Monitoring-Splunk/Missing-Internal-Logs-from-Server/m-p/705204#M10570 <P>Hello,</P><P>I have a server configured with three roles: Deployment Server, Console Monitoring, and License Master. However, I am not receiving the internal and audit logs from this server, such as logs from the Search Head or Indexers.</P><P>If you have any solutions to this problem, I would greatly appreciate your help.</P><P>&nbsp;</P> Mon, 25 Nov 2024 15:48:36 GMT https://community.splunk.com/t5/Monitoring-Splunk/Missing-Internal-Logs-from-Server/m-p/705204#M10570 BRFZ 2024-11-25T15:48:36Z https://community.splunk.com/t5/Monitoring-Splunk/Missing-Internal-Logs-from-Server/m-p/705206#M10571 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/266281">@BRFZ</a>&nbsp;,</P><P>did you configured this server to send logs to the Indexers?</P><P>did you opened the firewall routes between this server and Indexers on the port 9997?</P><P>Make these checks.</P><P>Ciao.</P><P>Giuseppe</P> Mon, 25 Nov 2024 15:54:44 GMT https://community.splunk.com/t5/Monitoring-Splunk/Missing-Internal-Logs-from-Server/m-p/705206#M10571 gcusello 2024-11-25T15:54:44Z