Monitoring Splunk

I am cloning _json sourcetype on managed splunk cloud to new custom name , the logs are not coming from log4j configuration

Nikhilsplunker
New Member

I have cloned a _json sourcetype to a custom sourcetype name and gave the correct URI for managed splunk cloud , still not being able to send logs to managed splunkcloud . I have also created a custom sourcetype cloning json_no_timestamp , it works, what are we missing
1) Is the issue on sourcetype definition or log4j configuration?
2) How to correct it ?

Tags (1)
0 Karma

Nikhilsplunker
New Member

Thanks will have a look and post back

0 Karma

woodcock
Esteemed Legend

We need more detail. In any case, check the error logs for splunkd and there is probably something there that you can fix.

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...