Logs are printed in console, but not getting pushed to Splunk Server

splunk / splunk-library-javalogging

Splunk logging appenders for popular Java Logging frameworks

http://dev.splunk.com/view/splunk-logging-java/SP-CAAAE2K

Apache License 2.0

135 stars 175 forks source link

Logs are printed in console, but not getting pushed to Splunk Server #286

Open VinayakJamadar opened 7 months ago

VinayakJamadar commented 7 months ago

Logs are printed correctly in console, but not getting pushed to Splunk Server.

And not even printing any error.

Below is my log4j2.xml configuration file

`<?xml version="1.0" encoding="UTF-8"?>

%d %p %c{1.} [%t] %m%n `

underhill commented 7 months ago

I'm seeing the same problem. Logs print to console and written to file but nothing in Splunk. I fired up tcpdump and can see packets going to the HEC endpoint. The heavy forwarder shows no errors and nothing in the index. Also verified HEC is working with curl. Using log4j v2.33.1 and splunk javalogging 1.11.8.