No Data displayed Spunk LOGbinder


No Data displayed Spunk LOGbinder

a

I have setup Splunk with SuperCharger to monitor AD changes but no data is being displayed on the dashboard. In the event log AD Changes i can see the forwarded events being recorded here. An initial check of domiancontrollers.csv showed the file was empty and i added the list of domain controllers manually but no data is being displayed on the dashboard and when i search in Splunk
i

aragon - 10/11/2018
I have setup Splunk with SuperCharger to monitor AD changes but no data is being displayed on the dashboard. In the event log AD Changes i can see the forwarded events being recorded here. An initial check of domiancontrollers.csv showed the file was empty and i added the list of domain controllers manually but no data is being displayed on the dashboard and when i search in Splunk

Where is SuperCharger sending those events? Did you create an input for that in Splunk?
a

imrago - 10/12/2018
aragon - 10/11/2018
I have setup Splunk with SuperCharger to monitor AD changes but no data is being displayed on the dashboard. In the event log AD Changes i can see the forwarded events being recorded here. An initial check of domiancontrollers.csv showed the file was empty and i added the list of domain controllers manually but no data is being displayed on the dashboard and when i search in Splunk

Where is SuperCharger sending those events? Did you create an input for that in Splunk?

SuperCharger is sending those events to the Splunk server. There is an input created in Splunk to collect those logs
i

aragon - 10/18/2018
imrago - 10/12/2018
aragon - 10/11/2018
I have setup Splunk with SuperCharger to monitor AD changes but no data is being displayed on the dashboard. In the event log AD Changes i can see the forwarded events being recorded here. An initial check of domiancontrollers.csv showed the file was empty and i added the list of domain controllers manually but no data is being displayed on the dashboard and when i search in Splunk

Where is SuperCharger sending those events? Did you create an input for that in Splunk?

SuperCharger is sending those events to the Splunk server. There is an input created in Splunk to collect those logs

By default the app is monitoring exactly the same directory
[WinEventLog://Supercharger-Destination-ADChanges/Log]

If nothing was changed in the inputs.conf then by default it is sending data to index=main

As the next step please check if index=main is populated with data from that source.



GO


Similar Topics


Reading This Topic


Login
Existing Account
Email Address:


Password:


Select a Forum....








LOGbinder Forum


Search