Eventgen Generate Once

[jadengoho]

Hi All,
I would like to ask on why does my Eventgen only Generate data Once.
It follows all the setting, but it ingest once.
Please see eventgen.conf

[juniper_sample]
disabled = false
latest = now
interval = 60
count = -1
randomizeCount = 0.2
outputMode = splunkstream
index = firewall_juniper
sourcetype = juniper:junos:firewall

[codebuilder · Accepted solution]

When you are using sample files, the "count = -1" setting is telling Eventgen to replay all events in the sample file one time. Thus your results.

If you want more events using sample files, set the count value equal to the number of events that you want generated.

[jadengoho]

I resolve this issue , by uninstalling the Splunk and installing a lower version.
It's weird that latest version of Splunk and latest version of eventgen doesn't work.

[codebuilder]

Did this solve the issue for you?

[jadengoho]

This didn't solve the issue , but it help a lot.