Quantcast
Channel: Questions in topic: "heavy-forwarder"
Viewing all articles
Browse latest Browse all 727

Why am I still seeing debug logs in the Splunk heavy forwarder filtering?

$
0
0
I have set the following on transforms.conf and props.conf but I still see DEBUG logs in my search. what did I miss transforms.conf #Remove: DEBUG [null_kube_DEBUG] REGEX = (DEBUG) DEST_KEY=queue FORMAT=nullQueue props.conf #### kube ################################ [source::kube.var.log.containers.*] TRANSFORMS-null = null_kube_DEBUG

Viewing all articles
Browse latest Browse all 727

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>