Splunk Enterprise

A script is running fine in the UF agent but is not sending data to indexer

akgmail
Engager

A script is running fine in the UF agent but is not sending data to indexer.

The UF agent is forwarding data to HF then to IDX.

 

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

can you tell some more information to us to help you? At least it would nice to get the next information.

  • UF version (OS, Splunk)
  • Can UF send it's internal / other logs to indexer
  • How you have test that script
  • Your inputs.conf

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...