Archive
Highlighted

Universal Forwarder "Waiting For Data"

Explorer

Good Morning,

I installed Splunk Universal Forwarder on a Windows Machine, then I tried to collect
Infomations from my pc, the answer that I had was : "WAITING FOR DATA",
and no data appears
????

Tags (1)
0 Karma
Highlighted

Re: Universal Forwarder "Waiting For Data"

Motivator

do you put the data inside a specific index instead of default index ? if yes custom indexes are not searched by default then you need to add index=myindex in your search.

Or add it as searched by default in Manager » Access controls » Roles » admin » "Indexes searched by default" section