All Apps and Add-ons

Why is Splunk Stream 7.x not capturing localhost / loopback / 127.0.0.1?

tmuth_splunk
Splunk Employee
Splunk Employee

I was testing Splunk Stream 7.0.1 on my laptop and trying to capture network traffic going to localhost. However, I'm not seeing any data.

0 Karma
1 Solution

tmuth_splunk
Splunk Employee
Splunk Employee

What a great question! I'm glad you asked. Your answer can be found in the documentation here:
http://docs.splunk.com/Documentation/StreamApp/7.0.1/DeployStreamApp/ConfigureStreamForwarder#Enabli...

View solution in original post

0 Karma

nathan_zhang
Engager

Hello,
I am using Splunk Stream to get Oracle stream data. I have configured loopback as documented but I can find Oracle local stream:

[root@dev local]# cat streamfwd.conf
[streamfwd]
tcpServer.N.address = 192.168.253.141
streamfwdcapture.0.interface = lo
tcpServer.N.port = 1521
streamfwdcapture.0.filter = tcp port 1521

Anyone can give some help? Thanks

0 Karma

tmuth_splunk
Splunk Employee
Splunk Employee

What a great question! I'm glad you asked. Your answer can be found in the documentation here:
http://docs.splunk.com/Documentation/StreamApp/7.0.1/DeployStreamApp/ConfigureStreamForwarder#Enabli...

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...