Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About rawatvineet
rawatvineet
Engager
Member since:
02-19-2013
09-21-2020
Community Statistics
| Posts | 11 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 02-19-2013 |
Activity Feed
- Karma Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer for MuS. 06-05-2020 12:46 AM
- Posted Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-07-2013 09:07 PM
- Posted Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-07-2013 09:04 PM
- Posted Re: splunk forwarders using too many sockets on Getting Data In. 11-06-2013 11:33 PM
- Posted Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-06-2013 11:20 PM
- Posted Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-06-2013 03:58 PM
- Posted Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-06-2013 06:17 AM
- Posted Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-06-2013 05:02 AM
- Posted Re: UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-06-2013 04:13 AM
- Posted UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-06-2013 02:32 AM
- Tagged UDP data on 516 port on a universal forwarder not showing up on splunk indexer on Getting Data In. 11-06-2013 02:32 AM
- Posted Re: error installing google maps app on Installation. 10-31-2013 10:03 AM
- Posted error installing google maps app on Installation. 10-30-2013 03:16 AM
- Tagged error installing google maps app on Installation. 10-30-2013 03:16 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
11-07-2013
09:07 PM
I am still looking to troubleshoot it MuS, once I have found a fix, i'll mark this post as answered
got wireshark downloaded on my forwarder system to see if it can capture something on 516
BTW, all your help is much appreciated here MuS 🙂
... View more
11-07-2013
09:04 PM
forwarder & indexer are on the same subnet as the remote syslog so there is no firewall between them
... View more
11-06-2013
11:33 PM
Check for any unused ports where initially data was configured to be received but later on stopped for some reason
you may remove those unused port using "splunk remove udp (or tcp) port#>
bit of housekeeping stuff might just help
... View more
11-06-2013
11:20 PM
Correction, thr is only 1 splunkd.exe which is listening on Forwarder.
514 is used is default syslog & 516 is whr i am trying to receive feed from another source
idea is to segregate data coming from various sources to this forwarder & then channelize them to different indexes
if i am not able to get the data from UDP 516 then i would go back to classic method of having everything received by Syslog & then read from it & further classify it via splunk methods
Thanks for your responses MuS!
... View more
11-06-2013
03:58 PM
yupp, I have tried receiving on a different UDP port on my kiwi syslog but it does not accept anything on 515 or 516 although my forwarder is able to receive on UDP 515.
splink list UDP was done on forwarder & it displays 514 & 515 as listening, even when i added 516 UDP, it shows to be listening on 516 but no data is collected on it
... View more
11-06-2013
06:17 AM
did search on all-time range+index(custom)+specific source but no results, also i checked the time stamp & it seems to lag by few minutes compare to the splunk forwarder's time. can difference in timestamp lead to index not receiving data?
... View more
11-06-2013
05:02 AM
nothing that i could find on 516 in splunkd.log 😞
I have ensured that my log source is able to make a successful connection with port 516 UDP on my forwarder
any further clues you may think of?
... View more
11-06-2013
04:13 AM
did not try that since, communication between indexer & forwarder is happening via TCP 9997
is it required that My Log source is directly able to communicate with my Indexer?
Thanks in advance for your response
... View more
11-06-2013
02:32 AM
Hi All,
I have a splunk Indexer receiving data from Kiwi syslog installed on a Splunk Forwarder machine.
it also receives some specific data on UDP port 515 on the same server
Both works as expected!
now, I have configured port UDP 516 to receive another feed from security devices but it won't show up as collecting data on my indexer
I have checked the following:
1. Splunkd is running on port 516
2. syntax is rightly added in inputs.conf with out any errors
3. splunk list udp shows 515 & 516 on which splunk is listening
4. custom index to which data is forwarded is created on splunk indexer
any clue to fix this would be greatly appreciated!!
... View more
- Tags:
- udp
10-31-2013
10:03 AM
hi MuS,
thanks for your reply
I installed Cisco Security Suite which has pre req as Google Maps
just wanted to have tht working as designed(location based maps based on Geo information) & hence looking for Google Maps bits
thanks for any help on this
... View more
10-30-2013
03:16 AM
Hi,
While installing Google Maps app on my splunk 6 instance, i am getting error that geolitecity.dat is broken & hence install is failing
tired downloading it through multiple mediums but could not get the working copy of the maps-20120820-25.tar.gz
can someone plz help me out here?
thanks much!
... View more
- Tags:
- googlemaps
