We are no longer receiving SourceFire eStreamer Events in Splunk. It was working fine until Feb 28.. estreamer.debug.log is not getting updating either /opt/splunkforwarder/etc/apps/eStreamer/bin
Splunk version on the forwarder is 6.0.2
There are no errors in splunkd.log
↧