I have forwarder not forwarding any input data other than _internal.
Checks performed:
splunk version - 6.4.2
Forwarder is up and running.
Checked the $SPLUNK_HOME/etc/system/local/inputs.conf . -- Checked the host name
Checked the $SPLUNK_HOME/etc/system/local/deploymentclient.conf
Checked the $SPLUNK_HOME/etc/system/local/server.conf
I don't see any error/warning in splunkd.log.
File path for the log files.
I have restarted the forwarder several times but no luck.
The inputs in the /etc/app are not forwarding.
Please advise.
↧