...uestion is: if we are unable to push new certificate by weekend will theuniversalforwarders stop logging the data and sharing it with indexes? Thank you
On one of our UniversalForwarders the splunkd service stopped running. I was able to restart it and it is now working fine. I was hoping that someone could tell me something about the error i f...
...ed to the indexer properly. I have checked that the log file which is not forwarded is being updated continuously in real time.
I am using Universalforwarder (splunkforwarder-4.3.2-123586-x64-r...
I have a windows domain controller with a universalforwarder.
I have Splunk_TA_Windows deployed out to it using theuniversalforwarder(this is the only app deployed),
I have an outputs.conf f...
...n the "Windows" index
What happens is that about 1-2x a day, the logs sent by UniversalForwarders stop from all machines leaving the Windows index blank. All other data t...
I have theuniversalforwarder installed on one of our Windows servers and it has been forwarding logs with no issue for some time now till this morning. One of our dashboards didn't report getting a...
On all theUniversalForwarders, any user has the ability to access REST API called Splunk ATOM Feed:Splunkd. They can access this on any UniversalForwarder by putting in https:localhost:8089 or l...
The Splunk Documentation has steps to upgrade a UniversalForwarder to a Heavy Forwarder. But not any steps on downgrading. Is it the same steps except swap where it says UF for HF and HF f...
...plunkForwarder
SplunkForwarder UNCONFIGURED ENABLED INVISIBLE
Now the problem: If I enable light forwarding via GUI on the Heavy Forwarder, somehow my UniversalForwarder c...
Hi,
We have a UniversalForwarder on our Linux rSyslog server. It was working fine until two weeks ago. The problem was it would stop sending data to the indexer, but showed no errors in the s...