Getting Data In

Setting up a UF in the Linux source server using CLI commands (receiving enabled in Splunk server), how can I get logs in the server?

ornelaso
New Member

Hi Team,

I've set up the Universal Forwarder(UF) forwarder in the Linux source server using CLI commands and also enabled the receiving in the Splunk server.

but I still don't see any logs in the Splunk server.

can someone help?

The log I'm monitoring is an app log, not any syslog.

0 Karma

somesoni2
Revered Legend

Have a look at Splunk documentation page I can't find my data! for troubleshooting steps.

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!