Splunk Search

Running phone uri=/services/broker/phonehome/connection is the only stanza in splunkd logs but not able to get the data

RBADAMSU
New Member

Can some one help me, As I am not able to query the logs in my search head console. I dont have any errors in my splunkd.logs ... It is keep on saying Running phone uri=/services/broker/phonehome/connection
But I am not able to see any data in the search head.
COuld some one help me in finding out the issue.

Thank you
R

Tags (1)
0 Karma

ansif
Motivator

Your splunkd.log has phonehome connection logs but it is not visible in Search head?Ami I right?

If so may I know your search query?

0 Karma

RBADAMSU
New Member

Index= index_name host = host_name

0 Karma

ansif
Motivator

make index=_internal then search for source splunkd.log

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...