About sifmad23

sifmad23 · ‎04-02-2021

I am installing Recorded Future Add on App into my Splunk ES environment I would like to know which Search Head should we install the Recorded Future App. Search head 1 (where Enterprise Security is installed) or Search Head 2 where ES is not installed. My better judgement tells me Search Head 2 however what is the Splunk best practice for this?

sifmad23 · ‎02-04-2021

Currently still experiencing the issue, tried the following: - checked to see if SE Linux running in permissive mode would resolve the issue nothing -not a disk space issue -system for local collection is running under root account - have identical settings on other server in different location and logs are being written. any advice or suggestions would be appreciated.

sifmad23 · ‎01-30-2021

One of our servers is forwarding fine however the files aren't being written to var/log/syslog/remote. I am new to Splunk so any assistance would be appreciated.

Posts	3
Solutions	0
Karma Given	3
Karma Received	0
Member Since	‎01-30-2021

Online Status	Offline
Date Last Visited	‎08-23-2023 12:02 PM

Recorded Future App Add On for Splunk ES

Syslog -ng not writing to directory var/log/syslog...

Recorded Future App Add On for Splunk ES

Re: Syslog -ng not writing to directory var/log/sy...

Syslog -ng not writing to directory var/log/syslog...