one tip: do search  for error and ssl term: i had mistyped  path to cert tail -f /opt/splunk/var/log/splunk/splunkd.log  |  grep -i 'error'  |  grep -i 'ssl' forwarder did not created ssl sessions attemp, but sent data with out ssl ... View more

after adding also Global reader as mention @diogofgm and complete reinstall of addon, logs started to flow. Lets see how stable will be input ... View more

return Error in 'eval' command: The expression is malformed. return only first row in search, but is very fast Thanks for advice ... View more

Thank you! This was exactly my issue! ... View more