{"action":"created","issue":{"url":"https://api.github.com/repos/splunk/eventgen/issues/85","repository_url":"https://api.github.com/repos/splunk/eventgen","labels_url":"https://api.github.com/repos/splunk/eventgen/issues/85/labels{/name}","comments_url":"https://api.github.com/repos/splunk/eventgen/issues/85/comments","events_url":"https://api.github.com/repos/splunk/eventgen/issues/85/events","html_url":"https://github.com/splunk/eventgen/issues/85","id":351503104,"node_id":"MDU6SXNzdWUzNTE1MDMxMDQ=","number":85,"title":"Not working, but few clues","user":{"login":"JohnKruse","id":2845087,"node_id":"MDQ6VXNlcjI4NDUwODc=","avatar_url":"https://avatars3.githubusercontent.com/u/2845087?v=4","gravatar_id":"","url":"https://api.github.com/users/JohnKruse","html_url":"https://github.com/JohnKruse","followers_url":"https://api.github.com/users/JohnKruse/followers","following_url":"https://api.github.com/users/JohnKruse/following{/other_user}","gists_url":"https://api.github.com/users/JohnKruse/gists{/gist_id}","starred_url":"https://api.github.com/users/JohnKruse/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JohnKruse/subscriptions","organizations_url":"https://api.github.com/users/JohnKruse/orgs","repos_url":"https://api.github.com/users/JohnKruse/repos","events_url":"https://api.github.com/users/JohnKruse/events{/privacy}","received_events_url":"https://api.github.com/users/JohnKruse/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2018-08-17T08:27:09Z","updated_at":"2018-08-30T18:55:48Z","closed_at":null,"author_association":"NONE","body":"I've had great success with Eventgen in the past, but recently I've had problems with 6.2.1 on a Mac. This all started when I updated from Splunk 6 to 7. I've blown away my Splunk install and have tried multiple different 7.x versions. Eventgen seems to start. Modinput_eventgen.log has entries and I can see Eventgen in settings/data input, but no eventgen.log is ever started - thus, I'm not sure what to look at. I've tried both the sample data sources and others. I've reinstalled several times with no success."},"comment":{"url":"https://api.github.com/repos/splunk/eventgen/issues/comments/417429502","html_url":"https://github.com/splunk/eventgen/issues/85#issuecomment-417429502","issue_url":"https://api.github.com/repos/splunk/eventgen/issues/85","id":417429502,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNzQyOTUwMg==","user":{"login":"lephino","id":2249857,"node_id":"MDQ6VXNlcjIyNDk4NTc=","avatar_url":"https://avatars0.githubusercontent.com/u/2249857?v=4","gravatar_id":"","url":"https://api.github.com/users/lephino","html_url":"https://github.com/lephino","followers_url":"https://api.github.com/users/lephino/followers","following_url":"https://api.github.com/users/lephino/following{/other_user}","gists_url":"https://api.github.com/users/lephino/gists{/gist_id}","starred_url":"https://api.github.com/users/lephino/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lephino/subscriptions","organizations_url":"https://api.github.com/users/lephino/orgs","repos_url":"https://api.github.com/users/lephino/repos","events_url":"https://api.github.com/users/lephino/events{/privacy}","received_events_url":"https://api.github.com/users/lephino/received_events","type":"User","site_admin":false},"created_at":"2018-08-30T18:55:48Z","updated_at":"2018-08-30T18:55:48Z","author_association":"CONTRIBUTOR","body":"Lol so that actually has to do with the max_out, which we did change in 6.  Long story short, there was an internal event queue that would build up events then drop them all at once.  In eg 6 that queue still exists, but now is only used when you have like \"count=100000\" and is flushed after every completed interval.  Have I thrown enough wrenches at you to catch yet?  And yeah, this was part of the major pieces of EG6, was to provide way more clarity and structure to how EG works.  Now the next step is to get all these nice neat structures defined and listed for you guys in the documentation. ;)"}}
{"actor":{"display_login":"lephino"}}