https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106917#M183290 <P>Note: <A href="http://docs.splunk.com/Documentation/Splunk/4.2.4/Troubleshooting/Enabledebuglogging#Enable_debug_messages_from_the_CLI_.284.1.4_and_later_versions.29">http://docs.splunk.com/Documentation/Splunk/4.2.4/Troubleshooting/Enabledebuglogging#Enable_debug_messages_from_the_CLI_.284.1.4_and_later_versions.29</A></P> Wed, 09 Nov 2011 05:35:06 GMT gkanapathy 2011-11-09T05:35:06Z https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106915#M183288 <P>There is a <A href="http://splunk-base.splunk.com/answers/81/how-can-i-change-the-logging-level-for-something-i-am-trying-to-debug">similar question</A> related to changing debug levels at runtime. But, what if I'm doing this on a Universal Forwarder (which doesn't have manager to help me with this)? How would I enable/disable debug levels dynamically in that case?</P> Wed, 09 Nov 2011 02:28:28 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106915#M183288 dwaddle 2011-11-09T02:28:28Z https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106916#M183289 <PRE><CODE>bin/splunk _internal call /server/logger/FSChangeMonitor -post:level DEBUG </CODE></PRE> <P>Replace FSChangeMonitor with whichever log level you'd like to change (see etc/log.cfg for some examples).</P> Wed, 09 Nov 2011 02:30:06 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106916#M183289 amrit 2011-11-09T02:30:06Z https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106917#M183290 <P>Note: <A href="http://docs.splunk.com/Documentation/Splunk/4.2.4/Troubleshooting/Enabledebuglogging#Enable_debug_messages_from_the_CLI_.284.1.4_and_later_versions.29">http://docs.splunk.com/Documentation/Splunk/4.2.4/Troubleshooting/Enabledebuglogging#Enable_debug_messages_from_the_CLI_.284.1.4_and_later_versions.29</A></P> Wed, 09 Nov 2011 05:35:06 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106917#M183290 gkanapathy 2011-11-09T05:35:06Z https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106918#M183291 <P>Since 4.2, splunk CLI can do it in this way;</P> <P><CODE><BR /> bin/splunk set log-level FSChangeMonitor -level DEBUG<BR /> </CODE></P> Tue, 14 Feb 2012 06:18:24 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-change-the-debug-level-on-a-Universal-Forwarder/m-p/106918#M183291 Masa 2012-02-14T06:18:24Z