If attempting to search for data that is being sent to an HTTP Source you are not seeing data with your queries you will want to follow these troubleshooting steps.
- Verify your user account may not have any Role Filters that may restrict you from viewing these messages.
- Run your search query for the HTTP source with the Use Receipt Time option under the Time Range selector and verify the lack of results. If results are seen, this typically points to an incorrect default timezone or time parsing configuration on the Source which may need to be addressed within the configuration.
- If results are not seen with the Use Receipt Time option, the following test will help validate the Sumo Logic service is accepting data for ingestion. Use the following CURL command as given below to send test data to the given HTTP Source endpoint and verify it completes successfully with "HTTP/1.1 200 OK"
curl -v -d "My test data Today's date" -X POST "<http_source_URL>" - Next, verify that the test data is being shown when searching for data against the specific Source with Use Receipt time checked in the search query. If you are still unable to see these messages after confirming a successful post request please open a case with Sumo Logic Support for help with further review.
Comments
0 comments
Please sign in to leave a comment.