- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Best way to debug indexing based on props.conf
Dark_Ichigo
Builder
10-28-2012
09:14 PM
Im having issues and I know its related to props.conf, but I have over 100 regexes and I dont want to test each one, is there a log file that I can follow to monitor why its not indexing?
Iv tried using Splunkd.log, but it doesnt say much about my current issue.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
splunkIT

Splunk Employee
10-29-2012
10:32 AM
Specifically, what is the issue you are having? You can enable debug logging on splunk, but I am not sure if is necessary for your issue. More information on debug logging here:
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dark_Ichigo
Builder
10-31-2012
05:00 PM
I just went through each regex one by one and found the odd one out, dodgy and took over 5 hours, but I got it.
