Splunk Forwarder on DC 2022 unable to receive data?

Ziadm — Mon, 03 Oct 2022 08:41:58 GMT

So today i installed the forwarder on a DC that is hosted on a VM but i cant seem to get any logs from this machine i've already enabled Splunk to listen on 9997 for receiving I'm also using the Splunk for windows addon and enabled all the logs from the config file (after copying it to the local directory) and the Splunk instance is hosted on the host machine and I've already setup the networking between the host and the VM

i basically followed this Guide but i still can't get to forward the events , am i missing any steps here? , i also confirmed that the indexer was set correctly from the outputs file

i was able to input data from the local host without an issue before if that helps

Re: Splunk Forwarder on DC 2022 unable to receive data

Ziadm — Mon, 03 Oct 2022 01:45:20 GMT

The log File

Re: Splunk Forwarder on DC 2022 unable to receive data

Ziadm — Mon, 03 Oct 2022 01:49:10 GMT

it's important to note that i'm using the free trial so i can't open a ticket with support
i'm just trying to practice Splunk on my own

topic Re: Splunk Forwarder on DC 2022 unable to receive data in Getting Data In

Splunk Forwarder on DC 2022 unable to receive data?

Re: Splunk Forwarder on DC 2022 unable to receive data

Re: Splunk Forwarder on DC 2022 unable to receive data