Log ingesting intermittently We could not find the path referenced . We have Univerasal forwarder is Windows server and Heavy forwarder is *nix server. How to get the diag files with debug enable of the UF and the HF?
Can you please provide the detailed explanation with commands
Hi
you can enable debug mode for splunkd.log file before taking diag.
Enable debug logging on all of splunkd.log
Splunk software has a debugging parameter (--debug) that you can use when you start Splunk software from the CLI in *nix. This command outputs logs to the $SPLUNK_HOME/var/log/splunk/splunkd.log file.
This option is not available on Windows. To enable debugging on Splunk software running on Windows, enable debugging on a specific processor. See Enable debug logging in Splunk Web or Enable debug logging using log.cfg.
Not all messages marked WARN or ERROR indicate actual problems with Splunk software; some indicate that a feature is not being used.
for splunk diag run following command
./splunk diag | splunk diag |