Hi Team ,
we are not seeing scheduler.log in splunk .
we have tried the below option but no luck
default-mode.conf file :
disabled = false
and also updated savedsearches.conf enableSched = 1
Disable the Spluklightforwarder app under the etc/apps directory .
View solution in original post
Did you checked at $SPLUNK_HOME/var/log/splunk?
yes i checked scheduler.log is not present and nothing is showing in splunkd.log for scheduler
can you elaborate?
where are you looking for the log? is it a distributed environment?