I have setup Indexer and trying to configure Lightweight forwarder. My input.conf on indexer looks like this: -
and output.conf on lighweight forwarder looks like this: -
When I run a wireshark I can see data packets going between the two hosts, but when I look into *NIX or search app, I do not see my lightweight forwader server in it. Any clue what I am missing.
Start by removing your
answered 07 Feb '11, 19:37
Is your forwarder configured to read any data/inputs?
answered 08 Feb '11, 03:12