Hello all, I am facing issue in collecting data from two of the hosts.e are using rsyslog to injest data. Logs are getting updated in the logdump of the HF but im not able to see the logs in splunk. We can see logs from other hosts , but having issues with two particular hosts with high log volume. I dont see any error/warning related to queueing. While checking the status of rsyslog service, we can see the below errors.
invalid or yet-unknown config file command 'TCPServerAddress' - have you forgotten to load a module? [v8.24.0-57.el7_9 try http://www.rsyslog.com/e/3003 ]
Could not create tcp listener, ignoring port 515 bind-address (null). [v8.24.0-57.el7_9 try http://www.rsyslog.com/e/2077 ]
module 'imtcp.so' already in this config, cannot be added [v8.24.0-57.el7_9 try http://www.rsyslog.com/e/2221 ]
Any suggestions/feedback is welcomes.
Thanks
... View more