Getting Data In

Manually created inputs.conf and still no data

kluey
Explorer

I installed the add-on and tried to follow the directions. After installing, there was no 'Set up' as stated in the readme file, so I manually created the inputs.conf and added lines below (Note: These are the only lines in the inputs.conf file):

\Splunk\etc\apps\Splunk_Ciscofirewalls\local\inputs.conf

[udp://514]
disabled = false

I restarted Splunk and still no data. Anyone have luck with this? I am on Splunk 5 and the overview states it is supported.

0 Karma

yannK
Splunk Employee
Splunk Employee

Here are some basic questions :

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...