×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
itprdgetinsured
Loves-to-Learn
Member since: ‎05-19-2017
‎08-11-2026
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎05-19-2017
Activity Feed
View All

Re: Cloudflare App for Splunk not loading

by in All Apps and Add-ons
‎08-13-2020 11:53 AM
‎08-13-2020 11:53 AM
Same issue and have a ticket with Cloudflare to fix the app they built.  Seems its supported by a third party which has not updated it to support 8.x. ... View more

Re: Splunk forwarder is logging data but why is Sp...

by in Getting Data In
‎05-22-2017 12:14 PM
‎05-22-2017 12:14 PM
Latter. 🙂 ... View more

Re: Splunk forwarder is logging data but why is Sp...

by in Getting Data In
‎05-19-2017 03:37 PM
‎05-19-2017 03:37 PM
Thanks woodcock and aakwah. I tried woodcock's query but still dont see starr.log. This is what I have on server : [root@824611-PHIXPRD-APP7 ms-starr]# date Fri May 19 17:30:53 CDT 2017 [root@824611-PHIXPRD-APP7 ms-starr]# ls -ltr starr.log -rw-r--r-- 1 app app 463520 May 19 17:30 starr.log And this is all I see in source when I query on UI : (starr.log is missing) /var/log/app/ms-starr/ms-starr.log.2017-05-17 1,900 48.346% /var/log/app/ms-starr/starr.log.1 1,298 33.028% /var/log/app/ms-starr/starr.log.2 667 16.972% /var/log/app/ms-starr/ms-starr.log.2017-05-16 65 1.654% ... View more

Splunk forwarder is logging data but why is Splunk...

by in Getting Data In
‎05-19-2017 01:29 PM
‎05-19-2017 01:29 PM
Splunk Forwarder metrics log on application node : metrics.log:05-19-2017 13:09:07.625 -0500 INFO Metrics - group=per_source_thruput, series="/var/log/app/ms-starr/starr.log", kbps=0.005355, eps=0.096773, kb=0.166016, ev=3, avg_age=0.333333, max_age=1 metrics.log:05-19-2017 13:09:07.625 -0500 INFO Metrics - group=per_source_thruput, series="/var/log/app/ms-starr/start.log", kbps=0.005355, eps=0.096773, kb=0.166016, ev=3, avg_age=0.333333, max_age=1 splunkd.log:05-18-2017 23:46:14.621 -0500 INFO TailReader - Batch input finished reading file='/var/log/app/ms-starr/start.log' Splunk Enterprise (receiver) log : [root@600277-ITIAD-BASTION1 splunk]# grep -i starr.log splunkd.log 05-19-2017 12:54:36.773 -0500 INFO WatchedFile - Will begin reading at offset=5534528 for file='/mnt/phixdr-app5/app/ms-starr/starr.log'. 05-19-2017 12:54:36.864 -0500 INFO WatchedFile - Will begin reading at offset=106038 for file='/mnt/phixdr-app5/app/ms-starr/ms-starr.log.2017-05-19'. Problem - starr.log is still not getting splunked. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎08-11-2026 11:25 AM