Splunk App for CEF: Issue with sending events from Splunk indexers

[splunker969]

Hi,
We are able to configure Splunk App for CEF and after updating we're able to map fields and output group. Since we're unable to test that events are leaving from Splunk when we tested last week for testing purpose. Since we were trying to send logs now. No logs are leaving from indexers we double checked the firewall rule it is allowing. We see no traffic is being left from Splunk Indexers? Means there might be a problem with Splunk side.

Any Thoughts what would be a problem? Any Help, please?

[rpille_splunk · Accepted solution]

I suggest working through each of these troubleshooting steps, in order: http://docs.splunk.com/Documentation/CEFapp/2.0.1/DeployCEFapp/Troubleshoot#No_data_is_arriving_at_r...

If you have completed those steps and you still can't find the issue, I suggest opening a Support case.

[splunker969]

Thanks @ rpille