For the last few days I was working on and off troubleshooting Splunk eStreamer client issue where application (App) was running but no IPS or File/Malware Events were populating panels. Log files under /opt/splunk/etc/apps/eStreamer/log were generated but for some reason App was not pulling them in. Eventually it would fail …