topic Read error. Either the application has not called WSAStartup, or WSAStartup failed. in Getting Data In

Read error. Either the application has not called WSAStartup, or WSAStartup failed.

splunker12er — Wed, 16 Apr 2014 05:38:55 GMT

I am getting the below error in splunkd.log

04-16-2014 05:20:42.782 +0000 ERROR TcpOutputFd - Read error. Either the application has not called WSAStartup, or WSAStartup failed.
04-16-2014 05:20:42.782 +0000 INFO  TcpOutputProc - Connection to 10.200.200.205:9997 closed. Read error. Either the application has not called WSAStartup, or WSAStartup failed.

My configs:

inputs.conf

Location : C:\Program Files\SplunkUniversalForwarder\etc\apps\MSICreated\local

[WinEventLog:Application]
disabled = 0
index = nttj_application_logs

outputs.conf

Location : C:\Program Files\SplunkUniversalForwarder\etc\system\local

[tcpout]
defaultGroup = default-autolb-group

[tcpout:default-autolb-group]
server = 10.200.200.205:9997

[tcpout-server://10.200.200.205:9997]

Please let me know what does this error mean ?

Re: Read error. Either the application has not called WSAStartup, or WSAStartup failed.

splunkranger — Mon, 21 Apr 2014 15:58:52 GMT

Did you find an answer for this?

Re: Read error. Either the application has not called WSAStartup, or WSAStartup failed.

splunker12er — Mon, 12 May 2014 17:15:53 GMT

nope. STill i face the same error. Can someone help in this?

Re: Read error. Either the application has not called WSAStartup, or WSAStartup failed.

jofe — Tue, 02 Sep 2014 08:15:47 GMT

Have the same problem here aswell.

Exact same error message on a Win 2008 server - (6.13 universalforwarder). It connect to the indexer, but does not forward any data.

Re: Read error. Either the application has not called WSAStartup, or WSAStartup failed.

lmyrefelt — Wed, 17 Sep 2014 14:02:28 GMT

Not that it shouldnt be in the way of having it working, but you dont need to specify booth a tcp-group and a tcpout-server in your outputs.conf .
One or the other should be OK.

Have you tried to re-install the agent ?
I have seen this message on a forwarder just the other day .. however in my case it was enough to just restart the agent (if i am not remembering wrong .. since i did not get ony more troubles with the forwarder after that i did not take any ation on the message) .

Re: Read error. Either the application has not called WSAStartup, or WSAStartup failed.

lmyrefelt — Wed, 17 Sep 2014 14:04:06 GMT

And dubbelcheck any configurations that might interfere with each other.

Re: Read error. Either the application has not called WSAStartup, or WSAStartup failed.

ludowillemans — Tue, 24 Mar 2015 10:10:38 GMT

I am having the same problem.

ERROR TcpOutputFd - Read error. Either the application has not called WSAStartup, or WSAStartup failed.

Just changed the system\local\inputs.conf, restarted splunk and now I get his error.
Even when I remove my change I am still getting this error.