Splunk Search

Running phone uri=/services/broker/phonehome/connection is the only stanza in splunkd logs but not able to get the data

RBADAMSU
New Member

Can some one help me, As I am not able to query the logs in my search head console. I dont have any errors in my splunkd.logs ... It is keep on saying Running phone uri=/services/broker/phonehome/connection
But I am not able to see any data in the search head.
COuld some one help me in finding out the issue.

Thank you
R

Tags (1)
0 Karma

ansif
Motivator

Your splunkd.log has phonehome connection logs but it is not visible in Search head?Ami I right?

If so may I know your search query?

0 Karma

RBADAMSU
New Member

Index= index_name host = host_name

0 Karma

ansif
Motivator

make index=_internal then search for source splunkd.log

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...