With splunk 6.6.3 release, I am able to see the error messages in splunkd.log. These error messages are about connectivity failure messages from splunk light forwarder to splunk heavy forwarder. I would like to know if there is a configuration option to redirect the contents of splunkd.log to stdout, so that these error messages will be seen in splunk forwarder container. Please let let know.
↧