Getting Data In

splunk ingestion

Mr_Sneed
Explorer

New Splunk instance throwing error after deploying apps. Please help

 

Root Causes --V

events from tracker.log have not been seen for the last 2190 seconds which is more than the red threshold

 

LOG --v

TIME (happening multiple times a millisecond) -0500 INFO Tailing Processor [MainTrailingThread]

adding watch on path:/opt/splunk/*

0 Karma

kiran_panchavat
Influencer

@Mr_Sneed 

Could you elaborate a little more on this? Copy and paste the configurations that you were pushing to the forwarders from the deployment server.

I hope this helps, if any reply helps you, you could add your upvote/karma points to that reply, thanks.
0 Karma
Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...