Splunk indexer for sonicwall firewall logs.

[captainjak]

Hi all, in our network environment to capture the logs and analyze that logs generated by SonicWall firewall we have implemented Splunk enterprise tool in Linux server. Our Splunk indexer is displaying the local linux server logs but not the firewall logs coming to server from sonicwall via syslog server. We're missing a single step away from indexing the logs. need support.

[asmetanin]

Settings > Access Controls > Roles > admin option : Indexes searched by default"
select and make it default
In the Search window type 'index=*', should see the events