Getting Data In

Splunk prevents application to log

laurentjehu
Engager

Hi,

I'm testing Splunk to monitoring the log of an application. The logs are generated with log4j.
When I configure Splunk to index the log file, no more activity is traced by the application.

When using tail in command line, I don't have the problem.

How can I configure splunk not to lock the file ?

Best regards,
Laurent

Tags (3)
0 Karma
1 Solution

laurentjehu
Engager

I have found a solution by adding a syslog appender to the log configuration file of log4j.
Splunk has been set up to listen on port UDP 514.

View solution in original post

laurentjehu
Engager

I have found a solution by adding a syslog appender to the log configuration file of log4j.
Splunk has been set up to listen on port UDP 514.

Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...