https://community.splunk.com/t5/Splunk-Search/splunk-not-recording-spanningtree-logs/m-p/465073#M191663 <P>We need more information to work with. What product is this data coming from? How is it being onboarded into Splunk? Are there any filters on the data?</P> Wed, 23 Oct 2019 14:46:22 GMT richgalloway 2019-10-23T14:46:22Z https://community.splunk.com/t5/Splunk-Search/splunk-not-recording-spanningtree-logs/m-p/465072#M191662 <P>My core switch had several spanning errors this morning, but Splunk did not record them. They are in the switch logs though - I need to know how to make it record those events (really, just record everything). Here's an example of logging info that is not in Splunk for my core switch:<BR /> %SPANTREE-7-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk TenGigabitEthernet1/1/2 VLAN98.<BR /> %SPANTREE-7-BLOCK_PORT_TYPE: Blocking TenGigabitEthernet1/1/2 on VLAN0098. Inconsistent port type.</P> Wed, 30 Sep 2020 02:41:06 GMT https://community.splunk.com/t5/Splunk-Search/splunk-not-recording-spanningtree-logs/m-p/465072#M191662 keithweller 2020-09-30T02:41:06Z https://community.splunk.com/t5/Splunk-Search/splunk-not-recording-spanningtree-logs/m-p/465073#M191663 <P>We need more information to work with. What product is this data coming from? How is it being onboarded into Splunk? Are there any filters on the data?</P> Wed, 23 Oct 2019 14:46:22 GMT https://community.splunk.com/t5/Splunk-Search/splunk-not-recording-spanningtree-logs/m-p/465073#M191663 richgalloway 2019-10-23T14:46:22Z https://community.splunk.com/t5/Splunk-Search/splunk-not-recording-spanningtree-logs/m-p/465074#M191664 <P>Never mind - I found the problem. I was searching in Smart mode - changed to Verbose mode and they showed up. Thanks</P> Wed, 23 Oct 2019 15:04:02 GMT https://community.splunk.com/t5/Splunk-Search/splunk-not-recording-spanningtree-logs/m-p/465074#M191664 keithweller 2019-10-23T15:04:02Z