Getting Data In

Logs arrive intermittently from Heavy Fordwarder to the splunk cloud

Deyvis
Observer

Greetings

I have a Heavy Fordwarder that constantly sends logs to the splunk cloud but I only receive the logs in the cloud at 09, 10 or 11 pm and then at 1 or 2 am the next day I get logs every 1 minute.

The source is a fortigate I have 4 nodes, 3 work perfectly and 1 is the one that is giving me problems.

What could be happening?

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...