I recently installed the elastic data integrator app for migrating data from elk server to splunk. After adding input option and enabling the modulator, no data is received on splunk. Is there anything additional that needs to be done while installing the modulator or there in input options. My project desires to obtain raw data from elk to splunk. I am also new to splunk. Any help will be much appreciated. I am also attaching screenshots depicting my problem.
I try that the app is work but have some issues such as cannot collect all data during a period that may related to data size in elk.
finally, I use api connection to get the data as a csv and use Splunk to collect the data.