Universal splunk forwarder as sidecar not showing internal splunk logs

infobrot...

SOLVED CLOSED ACTIVE ANSWERED
User: infobrother4
Posted: on Jun 19, 2024 03:21 AM
Forum: ASP.Net Web Forms
Replies: 1
Views: 263

I have implemented a sidecar container to forward my main application logs to splunk. Have used universalsplunkforwarder image. After I deploy both my main application and forwarder seems up and running. But anyway not recieving any logs in splunk index specified. To troubleshoot splunkd log or any specific splunk internal logs are not found in /var/log path. Can someone please help how we enable this splunk internal logs?

Download FREE API for Word, Excel and PDF in ASP.Net

dharmend...

0 1

Reply
User: dharmendr
Replied: on Jun 19, 2024 08:16 AM
Report

Hi infobrother4,

Verify whether you are getting data from forwarder using the following command.

| tstats count where index=_internal by host

Reference

https://community.splunk.com/t5/Getting-Data-In/Why-are-the-logs-not-getting-forwarded-into-the-splunk-instance/m-p/584654

I agree, here is the link: https://www.e-iceblue.com/Introduce/spire-office-for-net-free.html

Universal splunk forwarder as sidecar not showing internal splunk logs

Company

Explore

Follow us

Contact Us