Getting Data In

scheduler.log is not rolling in Splunk enterprise

sivapuvvada
Path Finder

Hi Team ,

we are not seeing scheduler.log in splunk .

we have tried the below option but no luck

default-mode.conf file :
[pipeline:scheduler]
disabled = false

and also updated savedsearches.conf enableSched = 1

Tags (1)
0 Karma
1 Solution

sivapuvvada
Path Finder

Disable the Spluklightforwarder app under the etc/apps directory .

View solution in original post

0 Karma

sivapuvvada
Path Finder

Disable the Spluklightforwarder app under the etc/apps directory .

0 Karma

p_gurav
Champion

Did you checked at $SPLUNK_HOME/var/log/splunk?

0 Karma

sivapuvvada
Path Finder

yes i checked scheduler.log is not present and nothing is showing in splunkd.log for scheduler

0 Karma

adonio
Ultra Champion

can you elaborate?
where are you looking for the log? is it a distributed environment?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...