Are you a member of the Splunk Community?
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- Splunk VMWARE app
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
I have installed the OVA from the vmware app, but after 3.1, the SDC indexes locally, and does not send the data back to my central splunk installation.
How can that happen ? I can see the hydra framework looks to be doing what it shall. But instead of the data ending up in splunk indexers, it ends up locally on the data collector.
I have searched, and theres is only one indexAndForward=false, so that is not the problem.
Any have any ideas ?
Thx
André
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
did you follow step 19 from the docs http://docs.splunk.com/Documentation/VMW/3.1/Install/Getacollectionnode ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
did you follow step 19 from the docs http://docs.splunk.com/Documentation/VMW/3.1/Install/Getacollectionnode ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
no problem 😉 converted to answer so feel free to mark this as answered - thx
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Oh, thx..... i did before upgrade, but I think I messed up after my upgrade, and removed some files, including the outputs.conf .... bummer
Thx
André
Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain
Splunk Lantern’s Guide to The Most Popular .conf25 Sessions
Unlock What’s Next: The Splunk Cloud Platform at .conf25
