Is there a way to create a Splunk query to show the errors from splunk TA and kv store.
Hi
can you open little bit more what you’re meaning with this?
Usually those are found from splunk’s internal logs.
r. Ismo
What i mean is i want to create a query to output kvstore error and splunk Ta errors
All those errors should be on internal logs. Currently quite many TAs are using those too. Those have own log files as a source in _internal. You should just query those from it and look what you have.
I want a sample query that will guide in creating one for both TA and Kvstore
