Thank you for the answer!
There are to many of errors:
11-02-2017 15:05:09.806 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" To see services enabled on particular target use
11-02-2017 15:05:09.806 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" 'systemctl list-dependencies [target]'.
11-02-2017 15:05:09.878 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" Error resolving 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:05:09.878 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:05:09 ntpdate[7774]: Can't find host 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:05:09.878 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:05:09 ntpdate[7774]: no servers can be used, exiting
11-02-2017 15:06:37.872 +0300 ERROR TcpOutputProc - Processing server from outputs.conf: can't resolve a valid IP address for host="splunkaday-linux-light"
11-02-2017 15:06:38.189 +0300 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file='/opt/splunk/var/log/splunk/django_error.log'.
11-02-2017 15:06:38.293 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh" Redirecting to /bin/systemctl status auditd.service
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" Error resolving 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:06:38 ntpdate[8441]: Can't find host 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:06:38 ntpdate[8441]: no servers can be used, exiting
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" Note: This output shows SysV services only and does not include native
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" systemd services. SysV configuration data might be overridden by native
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" systemd configuration.
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" If you want to list systemd services use 'systemctl list-unit-files'.
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" To see services enabled on particular target use
11-02-2017 15:06:38.354 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" 'systemctl list-dependencies [target]'.
11-02-2017 15:12:07.920 +0300 ERROR TcpOutputProc - Processing server from outputs.conf: can't resolve a valid IP address for host="splunkaday-linux-light"
11-02-2017 15:13:32.747 +0300 ERROR TcpOutputProc - Processing server from outputs.conf: can't resolve a valid IP address for host="splunkaday-linux-light"
11-02-2017 15:13:33.135 +0300 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file='/opt/splunk/var/log/splunk/django_error.log'.
11-02-2017 15:13:33.273 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh" Redirecting to /bin/systemctl status auditd.service
11-02-2017 15:13:33.316 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" Error resolving 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:13:33.317 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:13:33 ntpdate[9319]: Can't find host 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:13:33.317 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:13:33 ntpdate[9319]: no servers can be used, exiting
11-02-2017 15:13:33.320 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" Note: This output shows SysV services only and does not include native
11-02-2017 15:13:33.320 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" systemd services. SysV configuration data might be overridden by native
11-02-2017 15:13:33.320 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" systemd configuration.
11-02-2017 15:13:33.320 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" If you want to list systemd services use 'systemctl list-unit-files'.
11-02-2017 15:13:33.320 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" To see services enabled on particular target use
11-02-2017 15:13:33.320 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" 'systemctl list-dependencies [target]'.
11-02-2017 15:16:05.826 +0300 ERROR TcpOutputProc - Processing server from outputs.conf: can't resolve a valid IP address for host="splunkaday-linux-light"
11-02-2017 15:16:06.163 +0300 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file='/opt/splunk/var/log/splunk/django_error.log'.
11-02-2017 15:16:08.435 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" Note: This output shows SysV services only and does not include native
11-02-2017 15:16:08.435 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" systemd services. SysV configuration data might be overridden by native
11-02-2017 15:16:08.435 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" systemd configuration.
11-02-2017 15:16:08.435 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" If you want to list systemd services use 'systemctl list-unit-files'.
11-02-2017 15:16:08.435 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" To see services enabled on particular target use
11-02-2017 15:16:08.435 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/service.sh" 'systemctl list-dependencies [target]'.
11-02-2017 15:16:08.437 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh" Redirecting to /bin/systemctl status auditd.service
11-02-2017 15:16:08.437 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" Error resolving 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:16:08.437 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:16:06 ntpdate[10471]: Can't find host 0.centos.pool.ntp.org: Name or service not known (-2)
11-02-2017 15:16:08.437 +0300 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/time.sh" 2 Nov 15:16:06 ntpdate[10471]: no servers can be used, exiting
11-02-2017 15:21:43.052 +0300 ERROR TcpOutputProc - Processing server from outputs.conf: can't resolve a valid IP address for host="splunkaday-linux-light"
... View more