Getting Data In

Setting up a UF in the Linux source server using CLI commands (receiving enabled in Splunk server), how can I get logs in the server?

ornelaso
New Member

Hi Team,

I've set up the Universal Forwarder(UF) forwarder in the Linux source server using CLI commands and also enabled the receiving in the Splunk server.

but I still don't see any logs in the Splunk server.

can someone help?

The log I'm monitoring is an app log, not any syslog.

0 Karma

somesoni2
Revered Legend

Have a look at Splunk documentation page I can't find my data! for troubleshooting steps.

0 Karma
Get Updates on the Splunk Community!

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...