Hi Team ,
we are not seeing scheduler.log in splunk .
we have tried the below option but no luck
default-mode.conf file :
[pipeline:scheduler]
disabled = false
and also updated savedsearches.conf enableSched = 1
Disable the Spluklightforwarder app under the etc/apps directory .
Did you checked at $SPLUNK_HOME/var/log/splunk
?
yes i checked scheduler.log is not present and nothing is showing in splunkd.log for scheduler
can you elaborate?
where are you looking for the log? is it a distributed environment?