Splunk Data Stream Processor

splunk stream verify

verifi81
Path Finder

Hi.  My environment is running splunk stream app.

Logs from my windows environment servers are streamed to a  heavy forwarder and then out to splunk cloud.

The index it falls under is: index=stream

I am trying to determine if a particular windows server stream data is making it. The streamfwd process on the server is running.  The server is named: server1

At the indexer, I tried running a search of this but nothing returns:  index=stream host=server1

If I run a search like this, I see one HOST and 100+ hostnames in the same event: index=stream hostname{}=server1

Any recommendation?

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

What’s new on Splunk Lantern in August

This month’s Splunk Lantern update gives you the low-down on all of the articles we’ve published over the past ...

Welcome to the Future of Data Search & Exploration

You have more data coming at you than ever before. Over the next five years, the total amount of digital data ...

This Week's Community Digest - Splunk Community Happenings [8.3.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...