About Manilyn

Manilyn · ‎07-12-2019

I resolved the issue by commenting JSON lines from log.cfg

Manilyn · ‎07-12-2019

07-08-2019 17:22:55.806 -0500 WARN Logger - $SPLUNK_HOME/etc/log.cfg:263: Pa rse error at "appender.idata_ResourceUsage.serialization=JSON" 07-08-2019 17:22:55.807 -0500 WARN Logger - $SPLUNK_HOME/etc/log.cfg:273: Pa rse error at "appender.idata_DiskObjects.serialization=JSON" 07-08-2019 17:25:56.521 -0500 WARN Logger - $SPLUNK_HOME/etc/log.cfg:263: Pa rse error at "appender.idata_ResourceUsage.serialization=JSON" 07-08-2019 17:25:56.522 -0500 WARN Logger - $SPLUNK_HOME/etc/log.cfg:273: Pa rse error at "appender.idata_DiskObjects.serialization=JSON" 07-12-2019 07:00:43.255 -0500 WARN Logger - $SPLUNK_HOME/etc/log.cfg:263: Pa rse error at "appender.idata_ResourceUsage.serialization=JSON" 07-12-2019 07:00:43.255 -0500 WARN Logger - $SPLUNK_HOME/etc/log.cfg:273: Pa rse error at "appender.idata_DiskObjects.serialization=JSON"

Manilyn · ‎07-12-2019

Maybe someone here could help me as i have issue on starting the SPLUNK forwarder. Here's the full error upon trying to start the forwarder Checking prerequisites... Management port has been set disabled; cli support for this configuration is currently incomplete. Checking conf files for typos... Done All preliminary checks passed. Starting splunk server daemon (splunkd)... Error loading logging config file Timed out waiting for splunkd to start.

Posts	3
Solutions	1
Karma Given	0
Karma Received	0
Member Since	‎07-12-2019

Online Status	Offline
Date Last Visited	‎01-21-2021 02:14 AM

Unable to start Splunk forwarder

Re: Unable to start Splunk forwarder

Re: Unable to start Splunk forwarder

Unable to start Splunk forwarder