About sdurao

sdurao · ‎10-09-2020

They are transmitted via the UDP port to our Splunk syslog server. On the Clearpass application, UDP port 4514 has been entered. When you type the tcpudump command (tcpdump -i eth0 port 4514), you can see that it receives the frames on the syslog. Yes we have an UF on the Syslog server. However, I have the impression that it does not send them to the indexer. How can I correct this?

sdurao · ‎10-08-2020

Hi everybody I installed the Clearpass TA application on my SH instance. it collects logs via syslogs. So here is the configuration of my inputs.conf of the application [udp://4514] sourcetype = Aruba:CPPM:Syslog index = cg93_clearpass I restarted the service, but no log appears. On my syslog server, I ran the following command : tcpdump -i eth0 port 4514 We can see that the logs have arrived at the splunk syslog server Do you know where it can come from?

sdurao · ‎06-04-2018

Can you help me please ? I have always the same issue

sdurao · ‎06-04-2018

Can you help me please ? I have always the same issue

sdurao · ‎06-01-2018

Hi I have the same issue. I can't to put screenshots, pity. But when i go to the server, the common.js is there. So i don't understand why that's says it can not find this file. Should I replace it with a new common.js? Where can i found this file ? Thanks

sdurao · ‎05-28-2018

Hi I have the same issue. I can't to put screenshots, pity. But when i go to the server, the common.js is there. So i don't understand why that's says it can not find this file. Should I replace it with a new common.js? Where can i found this file ? Thanks

sdurao · ‎05-25-2018

Hi i have the same issue. But Can you explain how can we resolva that ? I have already common.js in my server.

sdurao · ‎04-09-2018

Hi We have log from an Elasticsearch syslog. And we want to import these logs into Splunk. How can i do that ? I would have done like this: - modify the /opt/splunk/etc/deployment-apps/cg93_all_uf_syslog_inputs/local/file and add [udp://number_port] sourcetype = elastic index = switch_logs Is that correct? Thanks Sham

Posts	8
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎04-09-2018

Online Status	Offline
Date Last Visited	‎02-27-2024 11:50 AM

Clearpass App for splunk via syslog but doasn't wo...

How to import elasticsearch logs into Splunk?

Re: Clearpass App for splunk via syslog but doasn'...

Clearpass App for splunk via syslog but doasn't wo...

Re: "This browser is not supported by Splunk"

Re: "This browser is not supported by Splunk"

Re: "This browser is not supported by Splunk"

Re: "This browser is not supported by Splunk"

Re: "This browser is not supported by Splunk"

How to import elasticsearch logs into Splunk?

Are you a member of the Splunk Community?