×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
Lenval06
Engager
Member since: ‎05-12-2017
‎02-02-2022
Community Statistics
Posts 3
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎05-12-2017
Activity Feed
View All

Re: Why am I unable to see the forwarder but data ...

by in Getting Data In
‎05-12-2017 01:53 PM
‎05-12-2017 01:53 PM
I mean the default page when you open Splunk: you have a list of "Hosts" , then if you click "Sources" you can see all your sources are are being indexed and finally if you click on "Sourcetypes" you can see all your sources types In this page, I do not have anything being displaying whereas I have data being received from a forwarder. Is this clearer ? Thanks ... View more

Re: Why am I unable to see the forwarder but data ...

by in Getting Data In
‎05-12-2017 01:42 PM
‎05-12-2017 01:42 PM
You are right Adonio, when I run this query I get this result. What I meant the "Search" page which shows all Hosts added,...and the moment I have the message "No data has been added",,,,whereas I should have the hostname on my cisco device. Any idea ? ... View more

Why am I unable to see the forwarder but data is b...

by in Getting Data In
‎05-12-2017 12:53 PM
‎05-12-2017 12:53 PM
Hi, I setup a forwarder on a linux server and setup Splunk to listen on port 9997 and I added the index name (cisco) I previously setup into the inputs.conf file. On the Splunk indexer, if I search "index=cisco", I can see all my data. However, my "Search" page is not displaying any "Hosts", any "Sources" and any "SourceTypes"....whereas I am receiving all data. Any idea what is wrong ? Philippe ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎02-02-2022 10:06 AM
Karma given to
View All