All Apps and Add-ons

Splunk VMWARE app

agneticdk
Path Finder

Hi

I have installed the OVA from the vmware app, but after 3.1, the SDC indexes locally, and does not send the data back to my central splunk installation.

How can that happen ? I can see the hydra framework looks to be doing what it shall. But instead of the data ending up in splunk indexers, it ends up locally on the data collector.

I have searched, and theres is only one indexAndForward=false, so that is not the problem.

Any have any ideas ?

Thx

André

Tags (1)
0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

MuS
SplunkTrust
SplunkTrust

MuS
SplunkTrust
SplunkTrust

no problem 😉 converted to answer so feel free to mark this as answered - thx

0 Karma

agneticdk
Path Finder

Oh, thx..... i did before upgrade, but I think I messed up after my upgrade, and removed some files, including the outputs.conf .... bummer

Thx

André

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...