5. Troubleshooting

The default Logging level for the add-on is INFO. If the modular inputs are not working as expected, please set the Logging level to DEBUG to retrieve more messages in the internal logs that may help to find where the problem is.

1. How to check error logs for MetaAccess Logs input

From the Search head, run the below search query to check logs reported by the MetaAccess Logs input. You need to add an additional text filter “ERROR” in the query to check only error messages

index=_internal source="/opt/splunk/var/log/splunk/ta_opswat_metaaccess_metaaccess_logs.log"

2. How to check error logs for MetaAccess API input

From the Search head, run the below search query to check logs reported by the MetaAccess API input. You need to add an additional text filter “ERROR” in the query to check only error messages:

index=_internal source="/opt/splunk/var/log/splunk/ta_opswat_metaaccess_metaaccess_api.log"