Getting Data In

Why is no data getting into splunk cloud?

Loves-to-Learn Lots

1. I have installed universal forwarder and have a Splunk cloud account.

2. Installed Splunk using this command /opt/splunkforwarder/bin/splunk install app /tmp/splunkclouduf.spl.

3. restarted to get changes into effect.

no logs in Splunk cloud

index= "*" found nothing

Labels (1)
0 Karma

Loves-to-Learn Lots

so far i have seen only these logs

+1000 INFO  TailReader [16663 tailreader0] - Batch input finished reading file='/opt/splunkforwarder/var/spool/splunk/tracker.log

the tail reader is not at all reading my inputs


0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...