Hello Splunk Experts,
We had issue where several network devices not ingesting into SPlunk. Further checking with Splunk found that the logs from the router is making it to the rsyslog server but it is NOT writing to disk. Need to check the rsyslog config to see why the data is not writing to disk.
Any suggestion how to check on this? Any example of rsyslog.conf that we can refer?
Thank in advance