Eventgen not getting data properly

mjlsnombrado · ‎04-04-2018

Hi, eventgen doesn't get the data correctly, using eventgen configuration data fields like host, source get in correctly but other fields are not and the raw event will contain all the data. TIA your help will be very much appreciated.

splunker12er · ‎04-04-2018

You can configure index, host, source and sourcetype from within the Eventgen's config file! (eventgen.conf )

Eventgen not getting data properly

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Mastering Threat Intelligence in ES 8.5, Splunk AI Assistant v2, and More from Splunk ...

Break the Build: Inside the KubeDoom Lounge at .conf26

Splunk Auto Ingestion Parallel Pipeline Scaling

Join the Conversation

Eventgen not getting data properly

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Mastering Threat Intelligence in ES 8.5, Splunk AI Assistant v2, and More from Splunk ...

Break the Build: Inside the KubeDoom Lounge at .conf26

Splunk Auto Ingestion Parallel Pipeline Scaling