# Graylog Splunk Plugin 0.4.0 with Graylog 3.2.2 not working

**URL:** <https://community.graylog.org/t/graylog-splunk-plugin-0-4-0-with-graylog-3-2-2-not-working/14536>\
**Category:** Graylog Add-ons\
**Created:** [March 18, 2020, 2:47pm UTC](https://community.graylog.org/t/graylog-splunk-plugin-0-4-0-with-graylog-3-2-2-not-working/14536 "2020-03-18T14:47:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![janholzbecher](https://avatars.discourse-cdn.com/v4/letter/j/6de8d8/32.png) [@janholzbecher](https://community.graylog.org/u/janholzbecher)\
**Post date:** [March 18, 2020, 2:47pm UTC](https://community.graylog.org/t/graylog-splunk-plugin-0-4-0-with-graylog-3-2-2-not-working/14536/1 "2020-03-18T14:47:46Z")

</div>

Hello,

I am using Graylog 3.2.2 (3 nodes cluster) and the Graylog Splunk Plugin 0.4.0 here: [https://marketplace.graylog.org/addons/974efcc3-8d78-4847-becd-0f26821d2646](https://marketplace.graylog.org/addons/974efcc3-8d78-4847-becd-0f26821d2646)

For the installation, I have copied the plugin on each of the graylog servers manually (was that correct or does the plugin get replicated automatically if copied to e.g. the master graylog server?).

I tried to configure the Splunk Plugin output to the all messages stream but got an error message at first. Unfortunately it disappeared to quickly. I retried the output assignment, then it worked but no effective output was generated.

Moreover, I had to restart the graylog servers because the message sync over the cluster was broken down.

Questions:  
Is this plugin compatible with Graylog 3.2.2?  
Is there a newer version than 0.4.0?  
Is there any better way to forward messages from Graylog to Splunk?

Thanks and best regards,  
Jan

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 18, 2020, 4:12pm UTC](https://community.graylog.org/t/graylog-splunk-plugin-0-4-0-with-graylog-3-2-2-not-working/14536/2 "2020-03-18T16:12:35Z")

</div>

he @janholzbecher

you can find the releases here: [https://github.com/graylog-labs/graylog-plugin-splunk/releases](https://github.com/graylog-labs/graylog-plugin-splunk/releases)

It might be that this plugin is not compatible with the latest Graylog release.

---

<div class="post-metadata">

**Author:** ![janholzbecher](https://avatars.discourse-cdn.com/v4/letter/j/6de8d8/32.png) [@janholzbecher](https://community.graylog.org/u/janholzbecher)\
**Post date:** [March 18, 2020, 6:16pm UTC](https://community.graylog.org/t/graylog-splunk-plugin-0-4-0-with-graylog-3-2-2-not-working/14536/3 "2020-03-18T18:16:16Z")

</div>

Hi Jan,

Thats exaclty the plugin I am using, however, not the RC version. Would you suggest using the RC?

Is there any alternative for a stream output to Splunk?

Best regards,

Jan

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [April 1, 2020, 6:16pm UTC](https://community.graylog.org/t/graylog-splunk-plugin-0-4-0-with-graylog-3-2-2-not-working/14536/4 "2020-04-01T18:16:22Z")

</div>

Closed on April 1, 2020, 6:16pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.