no matching events found

[bwenge]

I have configured ossec server and splunk on the same box.Ossec agents are also configured.I have tried to login as root on ossec agent machine but when I make search in splunk,that event(login failure) is not found(reported.I need your help to fix it?

[LCM]

Don't know ossec at all, but did you configure splunk's data input yet?

• http://www.splunk.com/base/Documentation/latest/User/AddDataToYourIndexes

ps: Further I would re-tag that!

[LCM]

And by the way, you have five open questions and no respond from your site! Please give at least feedback (or tick it as closed) to the people trying helping you!