Getting Data In

Data is not flowing

monawwer
New Member

Data is not flowing continuously from forwarder to indexer. Please suggest what are possible ways of troubleshooting.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Identify the times when data is or is not flowing. What is special about those times?
Review splunkd.log on the forwarder and indexer.
Verify the forwarder is running continously.

---
If this reply helps you, Karma would be appreciated.
0 Karma

monawwer
New Member

Forwarder is running continuously

0 Karma

sureshms
Engager

Are there any license warnings in indexer server logs?

0 Karma

monawwer
New Member

No license warnings.

0 Karma
Get Updates on the Splunk Community!

What’s new on Splunk Lantern in August

This month’s Splunk Lantern update gives you the low-down on all of the articles we’ve published over the past ...

Welcome to the Future of Data Search & Exploration

You have more data coming at you than ever before. Over the next five years, the total amount of digital data ...

This Week's Community Digest - Splunk Community Happenings [8.3.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...