Configured inputs to monitor a file path but no events visible in Splunk

[blbr123]

Hi All,

I have configured inputs to monitor a file path but no events visible in Splunk.

Checked internal index and found the below error

[Roy_9]

@blbr123 Sharing the inputs.conf file will help us look at this issue in a deeper level.

Did you create a separate index for this activity?

Have you checked whether the firewall connection is in place between the source(host) and destination(Splunk)

[renjith_nair]

The error mentioned shouldnt be the reason for missing the data. There could be multiple reasons and close look into the splunkd log should give you some hints.

Please refer to this documentation for generic reasons

https://docs.splunk.com/Documentation/Splunk/8.2.6/Troubleshooting/Cantfinddata

[richgalloway]

What exactly are you trying to monitor?  Are you sure it has data?  Please share the inputs.conf settings.

Also, how are you trying to find the data?  It may be there, but your search might be incorrect.