All Apps and Add-ons

McAfee Add On Installed on Heavy Forwarder Not forwarding data

Path Finder

Other apps on the Heavy forwarder are forwarding data just fine. I can connect to the database and fetch tables just fine through dbx, but none of the data appears to be making it to the indexers.

In database.conf:
[mcafee_epo_5_db]
database = mydatabase
host = myhost
password = encrypted
port = myport
username = myusername
disabled = 0

In inputs.conf:
[dbmon-tail://mcafee_epo_5_db/ta_mcafee_epo_5_input]
disabled = 0
host = myhost
index = myindex
The rest is all default from the McAfee Add-On.

Any thoughts? Like I said, other apps are having no issue hitting outputs.conf and being sent to the indexers.

0 Karma
1 Solution

Splunk Employee
Splunk Employee
index=_internal (source=*mcafee* OR source=*dbx*)

View solution in original post

0 Karma

Splunk Employee
Splunk Employee
index=_internal (source=*mcafee* OR source=*dbx*)

View solution in original post

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!