Question about "About the connection between the license master and license slaves", is this the same behavior like before Splunk Enterprise 6.5? I can only search in the _internal index ?
The splunkd.log file contents will be available in _internal index, so you can either search for failed to transfer rows directly on the file (on Splunk server/license slaves) splunkd.log or search for it.
failed to transfer rows
Thank you, it is like I say, only the _internal index is available.
Ok.. This behavior is same for Splunk 6.5 below as well.
