Jump to content

Splunk Help


Recommended Posts

Posted
9 hours ago, Sinu1308 said:

2 Years back work chesa Splunk tool mida.

input.conf lo mana app server logs path aa istham.

Which app server are you using ? Every app server will be having logs. aa log path aa ivalli ,

Splunkd.log file is for splunk agent(if is there any issue with splunk agent, that info will be captured here) and not for app server logs.

But in your case, may be app server logs content ni splunkd.log ki concatenate chesthunnaremo, which is completely wrong.

 

exactly bhayya.... looks like concatenate chesi inputs conf file lo monitor section lo eee splunkd.log path ichaaruu.... ala endhuku chesi untaaru antav ?  dhaani valla pros and cons emuntayee 

 

ippudu anni paths kaavalante inputs conf lo separate ga each application log file ivvala.. I mean seperate monitor sections create cheyyalaa

Posted
11 hours ago, Kalam_Youtheman said:

exactly bhayya.... looks like concatenate chesi inputs conf file lo monitor section lo eee splunkd.log path ichaaruu.... ala endhuku chesi untaaru antav ?  dhaani valla pros and cons emuntayee 

 

ippudu anni paths kaavalante inputs conf lo separate ga each application log file ivvala.. I mean seperate monitor sections create cheyyalaa

Pros em undavu bro... May be one day if you get any kind of issue with Splunk agent, then you will not able to find the RC..

ippudu anni paths kaavalante inputs conf lo separate ga each application log file ivvala.. I mean seperate monitor sections create cheyyalaa

Yes,we have option to set multiple log paths to monitor in input.conf file, 

Posted
14 hours ago, Sinu1308 said:

Pros em undavu bro... May be one day if you get any kind of issue with Splunk agent, then you will not able to find the RC..

ippudu anni paths kaavalante inputs conf lo separate ga each application log file ivvala.. I mean seperate monitor sections create cheyyalaa

Yes,we have option to set multiple log paths to monitor in input.conf file, 

ok thanks bro.. RC ante enti ?

Posted
16 minutes ago, Kalam_Youtheman said:

ok thanks bro.. RC ante enti ?

Root Cause

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...