Hey everyone,  Please Help! I have the same problem here!  I configure eventgen.conf to see some logs and it doesn't work .... When i checked "splunkd.log" i can see that the error comes from the script " modinput_eventgen.py "           Thanks in advance. Best regards. ... View more

Hi, Try placing the eventgen.conf file under the $SPLUNK_HOME\etc\apps\your_app\local and then restart the Splunk. ... View more

option 1 works fine, thanks. ... View more

yes. Please use an old version of eventgen. It should work with splunk 8.0. Do not use eventgen 7. After eventgen 7, it is only python3 supported. ... View more

Thanks. That's as I suspected, so no big deal. I am shutting down my instance daily for the night and I don't need nightly data, so I have saved searches that will update the file before shutdown, so will be in place for the next restart. ... View more

I can schedule a short meeting with you. Send your available time to me: lwu@splunk.com . (I am on GMT+8 timezone) ... View more

We are no longer publishing eventgen configs with TAs :(. I'm going to try to reach out to you directly. ... View more