Hello!!!!
I can't collect logs in Splunk after Splunk configuration
I have done all configuration but I still not getting logs in Splunk?
when I search index=* I can't find index=xxxx expected, why? where can I check and fix this??
Kindly help me on the above issues, thank you
Hi Jawaharas! the issue was fixed, The issue was lack of available storage on the /opt partition that received all logs from Syslog sender on the Splunk Management node, This caused the Splunk Forwarder to stop working, the issue was managed and fixed. everything is fine now. Thank you a lot for your kind help!
I'm glad you figured it out.