Hi Jotne,

It seems I found the problem, the problem is marking the BSD Syslog on log remote action. Finally the result is come.

Thanks and very appreciate your help.

Seems that you do not have a clean install. You are logging to several system at the same time. It should work. Try this: Remove all logg line and add this: /system logging action add name=myserver remote=10.100.10.105 target=remote /system logging add action=myserver prefix=MikroTik topics=!debug ...

Sorry the Dec 9 is from date server, I already change the NTP :D Here is the output /system logging export # dec/08/2018 19:21:37 by RouterOS 6.43.4 # software id = 29W1-FTPT # # model = 951G-2HnD # serial number = 642E05A9020A /system logging action add name=syslog remote=10.99.100.77 remote-port=7...

Unfortunately I didn't see that message on my splunk, Any idea what is happening on my splunk?

Hi Jotne, Yes, this is fresh install splunk and I did several time remove my VM and install again to make sure that. Here is the output /log print 17:47:19 firewall,info FW_INTERNAL forward: in:PJX out:BRX-LAN, proto TCP (ACK), 10.99.100.102:7332->10.121.61.108:52380, len 40 /log print detail time=1...

Hi Jotne,

Here is the output and just different from yours.

Hello, I did copy and paste that command on cli. The result prefix search on attachment Search MT.JPG And then I found something that on the search section if I remove module=xxx then I got the result on the dashboard. For the example on the device list dashboard I use this No Module.JPG instead of ...

Hello there,

This is my first time using splunk and I have no result on dashboard anyway also I did every step on the post #1, any idea why this happen?
The logs already show up on the splunk but the MikroTik app dashboard have no result at all.

Thanks and appreciate your help.