I installed the **Splunk Add-on for Unix and Linux** app in one of my Linux machine which have Hadoop is running, I configured ps.sh logs in **inputs.conf** under **/opt/splunkforwarder/Splunk Add-on for Unix and Linux/local/inputs.conf** by seeing documentation. I successfully getting ps.sh logs from that machine along with Kafka services are also getting in Splunk. So after some months I able to get ps.sh logs but Kafka logs are not reporting to Splunk. What is the reason behind this and also i reinstall the **Splunk Add-on for Unix and Linux** app and checked but no luck? Please anyone helps me to re-reporting the Kafka logs to Splunk.
The below query am using to see the Kafka logs, earlier it was given me success results but now its showing stopped at someday.
Query: ***sourcetype="ps" host="xxxxxxx" "kafka"***
↧
