Getting Data In
Highlighted

Forwarder Issue

Explorer

There are log files in a directory and all of them were forwarded to indexer except the files starting with SystemOut* and intrestingly it got forwarded till couple of days back ( last indexed was on Feb 7th).
Tried with this option, but no use
crcSalt =

Logs have this message..

02-09-2012 20:15:53.256 -0500 INFO BatchReader - Removed from queue file='/opt/log/websphere/appserverlogs/WESB/SystemOut.log'.

Any help is appreciated

Tags (1)
0 Karma
Highlighted

Re: Forwarder Issue

SplunkTrust
SplunkTrust

Hi Ferrari

you can find a lot of good tips about this topic in this answer here

cheers

0 Karma