Getting Data In
Highlighted

Why are logs forwarding from server to Splunk server but not in a readable format (-splunk-cooked-mode-v3)?

New Member

alt text

The logs are forwarding to from our server to the Splunk server.
But the logs are not readable format. (Attached screenshot)

(-splunk-cooked-mode-v3)

0 Karma
Highlighted

Re: Why are logs forwarding from server to Splunk server but not in a readable format (-splunk-cooked-mode-v3)?

Builder

Need to know what is being used to send the data (Splunk UF, syslog, etc..).
If using Splunk, show the outputs.conf stanza's

What are the settings of the input used to receive the data, show the inputs.conf stanzas

0 Karma
Highlighted

Re: Why are logs forwarding from server to Splunk server but not in a readable format (-splunk-cooked-mode-v3)?

New Member

i am sending catalina.out (Tomcat logs). Pls guide us.

0 Karma
Highlighted

Re: Why are logs forwarding from server to Splunk server but not in a readable format (-splunk-cooked-mode-v3)?

Builder

Great, however, what I need to know is How are you sending them? Splunk UF or Syslog?

What does the outputs.conf look like?

How are you receiving them? what does the inputs.conf look like

0 Karma