Archive

scheduler.log is not rolling in Splunk enterprise

Path Finder

Hi Team ,

we are not seeing scheduler.log in splunk .

we have tried the below option but no luck

default-mode.conf file :
[pipeline:scheduler]
disabled = false

and also updated savedsearches.conf enableSched = 1

Tags (1)
0 Karma
1 Solution

Path Finder

Disable the Spluklightforwarder app under the etc/apps directory .

View solution in original post

0 Karma

Path Finder

Disable the Spluklightforwarder app under the etc/apps directory .

View solution in original post

0 Karma

Champion

Did you checked at $SPLUNK_HOME/var/log/splunk?

0 Karma

Path Finder

yes i checked scheduler.log is not present and nothing is showing in splunkd.log for scheduler

0 Karma

SplunkTrust
SplunkTrust

can you elaborate?
where are you looking for the log? is it a distributed environment?

0 Karma