Security

error while giving path for different servers

rupesh212121
Explorer

hi my scenario is i am having different servers in which same services are running like httpd, maillog, errorlog and i want to see logs of all these servers. i have tried to give path for both the servers for seeing it access logs as /var/logs/httpd/access_logs and it gave me the following error.

"Encountered the following error while trying to save: In handler 'monitor': Cannot create another input with the name "/var/log/httpd/access_log", one already exists."

how can i see the same logs of two different servers.

plz help me in this regard.

thank u Prakash

Tags (1)
0 Karma

LCM
Contributor

Basically, you do:

Server 1 (Indexer - MASTER)

  1. Manager » Data inputs » Files & Directories » Add New --> */var/log/httpd/access_log*
  2. Manager » Forwarding and receiving » Receive data » Add New --> 9997

Server 2 (Forwarder - CLIENT)

  1. Manager » Data inputs » Files & Directories » Add New --> */var/log/httpd/access_log*
  2. Manager » Forwarding and receiving » Forward data » Add New --> < ip.from.your.master:9997 >

Please, read through following docs as well:

LCM
Contributor

That error means you already configured that path for monitoring then. There is no reason to configure it twice. Can you double check, if you entered that path before

rupesh212121
Explorer

but it is not accepting the path as it is saying the path already exist.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Casting Call: Compete in Cyber Games

Lights, Camera, SecOps: Apply to Compete in Cyber Games     Think you have what it takes to beat the clock? ...

How Edge Processor's Durable Queue Works

Edge Processor sits in one of the most consequential places in any Splunk pipeline: between your data sources ...