Getting Data In

Log checking

sushmitha_mj
Communicator

What command should I use to check spluk logs in a linux system?

And where should I run this command?

Tags (3)
0 Karma

esix_splunk
Splunk Employee
Splunk Employee

In Splunk : search for "index=_internal" - This will give you all internal Splunk logs on your instance(s).

Alternatively, and old school, you can look in the $splunk_home$|/opt/splunk/var/log/splunk/ folder and grep through the logs.

0 Karma

vincenteous
Communicator

This "logs" you're talking about, are they the one to check the state and errors in your Splunk instance? Or are they something else?

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...