Hi.
I have new install Splunk 6.6.1 and Cisco eStreamer for Splunk 2.2.2 on Windows Server 2012 R2. I configured eStreamer, but no success result. I add option "Verbose, debug-style logging" in eStreamer setup, restart server and try find logs, why eStreamer not working.
I'm not found log file estreamer_debug.log in c:\Program Files\Splunk\etc\apps\eStreamer\bin\ directory and in any other directory on the server. Also folder c:\Program Files\Splunk\etc\apps\eStreamer\log\ is empty.
estreamer.conf
[estreamer]
changed = 1
client_disabled = 0
debug = 1
log_extra_data = 1
log_flows = 1
log_metadata = 1
log_packets = 1
pkcs12_file = $APP_PATH/bin/opaopa.pkcs12
pkcs12_password = opapa
server = 192.168.0.10
Thanks!
↧