Skip to main content
Version: Next

How to Generate Sample Events for Testing Purposes

This functionality relies on the "The Splunk Event Generator" software available from https://github.com/splunk/eventgen.

Install the Eventgen app (https://splunkbase.splunk.com/app/1924/) on the indexer and perform the following:

  1. Create directory $SPLUNK_ROOT/etc/apps/TA-netflow/local/ if it doesn't exist
  2. Copy eventgen.conf from /default to /local folder and change the line: disable = true to disable = false
  3. Restart Splunk