Reporting

Data for TA-Broker appear in Search and Reporting but not in Splunk App for XenApp

thorsten1
New Member

Hello,
we set up splunk for testing purpose.
i install the forwarder and the add-on on my broker server and it collects successfull data.
I can see them in Search and Reporting, but in the App for XenApp it shows me "No Data"

DEBUG: base lispy: [ AND index::xenapp sourcetype::xenapp:*:farm ]
DEBUG: search context: user="thorsten1", app="SplunkAppForXenApp", bs-pathname="/opt/splunk/etc"

Any Ideas?
Thanks...

0 Karma

jconger
Splunk Employee
Splunk Employee

From the search app, does the following query return results?

index=xenapp*

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...