Hi,
I am new to splunk and tyring to configure forwarding of weblogic output logs. Splunk enterprise is installed/set up on serverA and universal forwarder on serverB which has weblogic server running on it. Below is the inputs.conf of universal forwarder on serverB.
inputs.conf of universal forwarder:
[monitor:///opt/user_projects/domains/wlsDomain/servers/ms1/logs/ms1.log]
disabled = false
sourcetype = log4j
index = true
./splunk list forward-server
192.168.11.12:9997
When I do a search "host=serverB", I do not see any data from the weblogic server. Can anybody please help me with set up or let me know where can I find useful documentation (i tried for apache http and it works, but not for weblogic).
... View more