logs are not being ingested into Splunk. The Inputs and outputs are configured correctly. receiving the following error in the splunkd.log file
ERROR FileClassifierManager - Error (bad allocation) encountered while getting file type for 'c:\Program Files\SplunkUniversalForwarder\var\log\splunk\splunkd.log.1'.
I'm also getting this issue, except my UF is delayed by 400 hours sending logs to Splunk. And only for Windows Events.
Anyone figure out why? I'm having this exact same issue.