Thanks for help Jotne and jvanhambelgium. After I reinstall the Splunk server, all the things works well . But Some graph in APP didn't work. i can get the graph for Mikrotik CAPsMAN Wifi Connection and "Mikrotik CAPsMAN Number of Clients pr AP" , but there is no graph for"Mikrotik CA...

Mine never needs to be restarted. Have one version where Splunk listen on port 514 (not recommended as it needs to be root) Other version have rsyslog server as input and Splunk reads rsyslog logs. Both running fine.' Do you pass any firewall on the way from MikroTik to the Splunk server? What do y...

Splunk versino : 8.2.4 License Type :Free license group Volume used today 3 MB (0.524% of quota) Mikrotik schedule : 5 minutes When I login in the Mikrotik logs on Splunk , running search mikrotik on splunk ,There is no log record in splunk server. After I restart Splunk service on web . splunk serv...

NB logging large amount of Accouning, DNS or firewall rules quickly eats up license, so I do recommend to turn off Accouning/DNS logging to start with.
How to turn off DNS logging ? When I disable Accounting function , log server still receive the dns request .
Thanks.

I solved this problem. It was cause by the SNMP read access. When I set the community read access permission , snmpwalk adn snmpget would not output the value. When I set add the community write access permission , then snmpwalk adn snmpget would output the value. Why the community read access can n...

I setup the global variable. > :global testvalue 100 Then I add a script to output the value of variable. > /system script add dont-require-permissions=no name=test-result owner=madi policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ ":put \$testvalue" > /syst...