All Apps and Add-ons

Eventgen Generate Once

jadengoho
Builder

Hi All,
I would like to ask on why does my Eventgen only Generate data Once.
It follows all the setting, but it ingest once.
Please see eventgen.conf

[juniper_sample]
disabled = false
latest = now
interval = 60
count = -1
randomizeCount = 0.2
outputMode = splunkstream
index = firewall_juniper
sourcetype = juniper:junos:firewall
Tags (1)
0 Karma
1 Solution

codebuilder
SplunkTrust
SplunkTrust

When you are using sample files, the "count = -1" setting is telling Eventgen to replay all events in the sample file one time. Thus your results.

If you want more events using sample files, set the count value equal to the number of events that you want generated.

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

0 Karma

codebuilder
SplunkTrust
SplunkTrust

When you are using sample files, the "count = -1" setting is telling Eventgen to replay all events in the sample file one time. Thus your results.

If you want more events using sample files, set the count value equal to the number of events that you want generated.

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

jadengoho
Builder

I resolve this issue , by uninstalling the Splunk and installing a lower version.
It's weird that latest version of Splunk and latest version of eventgen doesn't work.

0 Karma

codebuilder
SplunkTrust
SplunkTrust

Did this solve the issue for you?

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma

jadengoho
Builder

This didn't solve the issue , but it help a lot.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...