{"action":"created","issue":{"url":"https://api.github.com/repos/splunk/eventgen/issues/85","repository_url":"https://api.github.com/repos/splunk/eventgen","labels_url":"https://api.github.com/repos/splunk/eventgen/issues/85/labels{/name}","comments_url":"https://api.github.com/repos/splunk/eventgen/issues/85/comments","events_url":"https://api.github.com/repos/splunk/eventgen/issues/85/events","html_url":"https://github.com/splunk/eventgen/issues/85","id":351503104,"node_id":"MDU6SXNzdWUzNTE1MDMxMDQ=","number":85,"title":"Not working, but few clues","user":{"login":"JohnKruse","id":2845087,"node_id":"MDQ6VXNlcjI4NDUwODc=","avatar_url":"https://avatars3.githubusercontent.com/u/2845087?v=4","gravatar_id":"","url":"https://api.github.com/users/JohnKruse","html_url":"https://github.com/JohnKruse","followers_url":"https://api.github.com/users/JohnKruse/followers","following_url":"https://api.github.com/users/JohnKruse/following{/other_user}","gists_url":"https://api.github.com/users/JohnKruse/gists{/gist_id}","starred_url":"https://api.github.com/users/JohnKruse/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JohnKruse/subscriptions","organizations_url":"https://api.github.com/users/JohnKruse/orgs","repos_url":"https://api.github.com/users/JohnKruse/repos","events_url":"https://api.github.com/users/JohnKruse/events{/privacy}","received_events_url":"https://api.github.com/users/JohnKruse/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-08-17T08:27:09Z","updated_at":"2018-08-21T06:41:46Z","closed_at":null,"author_association":"NONE","body":"I've had great success with Eventgen in the past, but recently I've had problems with 6.2.1 on a Mac. This all started when I updated from Splunk 6 to 7. I've blown away my Splunk install and have tried multiple different 7.x versions. Eventgen seems to start. Modinput_eventgen.log has entries and I can see Eventgen in settings/data input, but no eventgen.log is ever started - thus, I'm not sure what to look at. I've tried both the sample data sources and others. I've reinstalled several times with no success."},"comment":{"url":"https://api.github.com/repos/splunk/eventgen/issues/comments/414566664","html_url":"https://github.com/splunk/eventgen/issues/85#issuecomment-414566664","issue_url":"https://api.github.com/repos/splunk/eventgen/issues/85","id":414566664,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNDU2NjY2NA==","user":{"login":"JohnKruse","id":2845087,"node_id":"MDQ6VXNlcjI4NDUwODc=","avatar_url":"https://avatars3.githubusercontent.com/u/2845087?v=4","gravatar_id":"","url":"https://api.github.com/users/JohnKruse","html_url":"https://github.com/JohnKruse","followers_url":"https://api.github.com/users/JohnKruse/followers","following_url":"https://api.github.com/users/JohnKruse/following{/other_user}","gists_url":"https://api.github.com/users/JohnKruse/gists{/gist_id}","starred_url":"https://api.github.com/users/JohnKruse/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JohnKruse/subscriptions","organizations_url":"https://api.github.com/users/JohnKruse/orgs","repos_url":"https://api.github.com/users/JohnKruse/repos","events_url":"https://api.github.com/users/JohnKruse/events{/privacy}","received_events_url":"https://api.github.com/users/JohnKruse/received_events","type":"User","site_admin":false},"created_at":"2018-08-21T06:41:46Z","updated_at":"2018-08-21T06:41:46Z","author_association":"NONE","body":"Thanks Brian. I think my problems were two-fold. First, my company started\nusing SPlunk to monitor our laptops. For months, it didn't seem to\ninterfere, but I think now that something changed and there were conflicts\nwith port 8089. I went into SA-Eventgen's eventgen.conf and changed the\nmanagement port. The second issue was that I don't remember ever having to\nenable anything under the Data Inputs... it just worked in the past. So, it\nseems to be generating events now.\n\nTHanks for your help!\nJohn\n============================================\nJohn Kruse   john@kruser.org   781.333.8349\n\n* \"A complex system that works is invariably found to have evolved from a\nsimple system that worked. A complex system designed from scratch never\nworks and cannot be patched up to make it work. You have to start over with\na working simple system.\" – John Gall*\n\n\nOn Fri, Aug 17, 2018 at 11:03 PM Brian Bingham <notifications@github.com>\nwrote:\n\n> I also want to make sure you installed the eventgen from splunk base, or\n> you downloaded this git repo and used the \"build\" command to create the SPL\n> file that goes inside of splunk\n>\n> —\n> You are receiving this because you authored the thread.\n> Reply to this email directly, view it on GitHub\n> <https://github.com/splunk/eventgen/issues/85#issuecomment-413987560>, or mute\n> the thread\n> <https://github.com/notifications/unsubscribe-auth/ACtpnwvEOfpveh7GDANUWDyh87WDApMiks5uRy-QgaJpZM4WBK1g>\n> .\n>\n"}}
{"actor":{"display_login":"JohnKruse"}}