Hi,
I have installed splunk app for cef and configured CEF outputs and verified the query by preview window.
All new event are sent to another instance of splunk on another PC.
I have 2 issues unsolved.
1. The syslog server does not get the converted cef logs.
2. How to check if splunk trying to send the logs?
3. How I set splunk app for cef to automatically send the converted logs to syslog server?
Thanks
hI did you find the solution to your query