topic Re: Log sent to port 514 not appearing in Monitoring Splunk https://community.splunk.com/t5/Monitoring-Splunk/Log-sent-to-port-514-not-appearing/m-p/471480#M8276 <P>Hi toledotiago, <BR /> the input you opened is Splunk-TCP input to receive data from a Splunk Universal Forwarder in Splunk’s internal format, not any arbitrary tcp source. </P> <P>Take a look at <A href="https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/Monitornetworkports">https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/Monitornetworkports</A> for the tcp/udp input you are looking for. </P> <P>If you are dealing with syslog i highly recommend this blog: </P> <P><A href="http://www.georgestarcher.com/splunk-success-with-syslog/">http://www.georgestarcher.com/splunk-success-with-syslog/</A></P> <P>Sincerely <BR /> hgrow</P> Thu, 31 Oct 2019 04:17:01 GMT hgrow 2019-10-31T04:17:01Z Log sent to port 514 not appearing https://community.splunk.com/t5/Monitoring-Splunk/Log-sent-to-port-514-not-appearing/m-p/471479#M8275 <P>I configured my application to log to Splunk, I see the package arriving in wirehark but it does not appear in wireshark.</P> <P>What setting have I forgotten? Or is it missing</P> <P><A href="https://ibb.co/n7vb5N2">https://ibb.co/n7vb5N2</A></P> <P><A href="https://ibb.co/wgZz0Yk">https://ibb.co/wgZz0Yk</A></P> Wed, 30 Oct 2019 01:33:48 GMT https://community.splunk.com/t5/Monitoring-Splunk/Log-sent-to-port-514-not-appearing/m-p/471479#M8275 toledotiago 2019-10-30T01:33:48Z Re: Log sent to port 514 not appearing https://community.splunk.com/t5/Monitoring-Splunk/Log-sent-to-port-514-not-appearing/m-p/471480#M8276 <P>Hi toledotiago, <BR /> the input you opened is Splunk-TCP input to receive data from a Splunk Universal Forwarder in Splunk’s internal format, not any arbitrary tcp source. </P> <P>Take a look at <A href="https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/Monitornetworkports">https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/Monitornetworkports</A> for the tcp/udp input you are looking for. </P> <P>If you are dealing with syslog i highly recommend this blog: </P> <P><A href="http://www.georgestarcher.com/splunk-success-with-syslog/">http://www.georgestarcher.com/splunk-success-with-syslog/</A></P> <P>Sincerely <BR /> hgrow</P> Thu, 31 Oct 2019 04:17:01 GMT https://community.splunk.com/t5/Monitoring-Splunk/Log-sent-to-port-514-not-appearing/m-p/471480#M8276 hgrow 2019-10-31T04:17:01Z