Hi all,
My Splunk Light UI is not receiving any logs from the forwarder's /var/log.
I have installed the required Linux addons,I did a ./splunk list inputstatus and the files in /var/log's percent is 100.00 and type = finished reading. the ./splunk list monitor also showed the files in /var/log but the logs are not appearing in my Splunk Light web interface.
Any help is appreciated.
Is there any error in internal logs?