Getting Data In

What is included in Linux syslog?

vnguyen46
Contributor

Hi,

On Linux Splunk servers, my system admin set this record in remotesyslog.conf
. @@syslog-zone40.uth.tmc.edu:1514

Anyone knows what type of logs this setup is send to Splunk HF? (os log and application log, or anything else)

Thank you,

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

Probably same events are sent also to local /var/log/messages and other files under /var/log directory? You should start to look there.

Ismo

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk Observability Cloud – June 2025

What’s New in Splunk Observability Cloud – June 2025 We are excited to announce the latest enhancements to ...

Almost Too Eventful Assurance: Part 2

Work While You SleepBefore you can rely on any autonomous remediation measures, you need to close the loop ...

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

 Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research Team (STRT) and ...