<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: NetFlow Integrator 3.1.0   with splunk 5.0.2 can't start in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/NetFlow-Integrator-3-1-0-with-splunk-5-0-2-can-t-start/m-p/35685#M6507</link>
    <description>&lt;P&gt;Please make sure that the host has a proper FQDN in /etc/hosts. If this does not solve the issue, please submit a ticket at &lt;A href="https://netflowlogic.zendesk.com/home"&gt;https://netflowlogic.zendesk.com/home&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 20 Feb 2013 21:16:46 GMT</pubDate>
    <dc:creator>NetFlow_Logic</dc:creator>
    <dc:date>2013-02-20T21:16:46Z</dc:date>
    <item>
      <title>NetFlow Integrator 3.1.0   with splunk 5.0.2 can't start</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/NetFlow-Integrator-3-1-0-with-splunk-5-0-2-can-t-start/m-p/35684#M6506</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I'm new in splunk. Splunk with syslog works correct now. I try test netflow from cisco asa. I set netflow integrator on port 9995 and i set data source in  splunk for udp on port 11514 source type netflow but netflow integrator not start:&lt;/P&gt;

&lt;P&gt;NetFlow Integrator Server Status&lt;BR /&gt;
NetFlow Integrator is not running. &lt;/P&gt;

&lt;P&gt;i see in log:&lt;BR /&gt;
 /opt/splunk/etc/apps/netflow/logs # tail -f netflow_controller.log&lt;/P&gt;

&lt;P&gt;2013-02-18 17:47:21,102 INFO Start server&lt;BR /&gt;
2013-02-18 17:47:21,103 DEBUG Set lock!&lt;BR /&gt;
2013-02-18 17:47:28,191 DEBUG Remove lock!&lt;BR /&gt;
2013-02-18 17:47:28,227 DEBUG NetFlow Integrator is not running.&lt;/P&gt;

&lt;P&gt;i tried start  from cli:&lt;/P&gt;

&lt;P&gt;/opt/splunk/etc/apps/netflow/bin/flowintegrator_linux64/bin # ./flowintegrator start&lt;BR /&gt;
Starting Controller...&lt;BR /&gt;
Starting NetFlow Integrator server...&lt;BR /&gt;
 but i get in logs:&lt;BR /&gt;
 tail -f server.log&lt;BR /&gt;
2013-02-18 17:47:23 Starting server...&lt;BR /&gt;
VERSION: 1.4.1.1.16&lt;BR /&gt;
2013-02-18 17:48:11 Starting server...&lt;BR /&gt;
VERSION: 1.4.1.1.16&lt;/P&gt;

&lt;P&gt;i see also in logs:&lt;/P&gt;

&lt;P&gt;tail -f nfc_server.2013-02-18.17_52_11.00.log&lt;BR /&gt;
02-18 17:52:11.651 VERSION: 1.4.1.1.16&lt;BR /&gt;
02-18 17:52:11.652 NETCONN: CONNECT to 127.0.0.1:20047 failed: 111&lt;BR /&gt;
02-18 17:52:11.652 CONN SEND: failed to establish TCP/IP connection&lt;BR /&gt;
02-18 17:52:11.652 CONN SR: send failed: 5 (attempt: 1)&lt;BR /&gt;
02-18 17:52:11.674 NETCONN: gethostbyname() failed&lt;BR /&gt;
02-18 17:52:11.674 Mgmt: receive failed: 107&lt;BR /&gt;
02-18 17:52:11.674 Mgmt thread: exiting: 5&lt;BR /&gt;
02-18 17:52:12.653 NETCONN: CONNECT to 127.0.0.1:20047 failed: 111&lt;BR /&gt;
02-18 17:52:12.653 CONN SEND: failed to establish TCP/IP connection&lt;BR /&gt;
02-18 17:52:12.653 CONN SR: send failed: 5 (attempt: 2)&lt;BR /&gt;
02-18 17:52:13.653 NETCONN: CONNECT to 127.0.0.1:20047 failed: 111&lt;BR /&gt;
02-18 17:52:13.653 CONN SEND: failed to establish TCP/IP connection&lt;BR /&gt;
02-18 17:52:13.653 CONN SR: send failed: 5 (attempt: 3)&lt;/P&gt;

&lt;P&gt;I'm  stuck, thanks for help or any cue how to debug further..&lt;/P&gt;

&lt;P&gt;thanks,&lt;BR /&gt;
pop&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 13:20:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/NetFlow-Integrator-3-1-0-with-splunk-5-0-2-can-t-start/m-p/35684#M6506</guid>
      <dc:creator>popo80</dc:creator>
      <dc:date>2020-09-28T13:20:17Z</dc:date>
    </item>
    <item>
      <title>Re: NetFlow Integrator 3.1.0   with splunk 5.0.2 can't start</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/NetFlow-Integrator-3-1-0-with-splunk-5-0-2-can-t-start/m-p/35685#M6507</link>
      <description>&lt;P&gt;Please make sure that the host has a proper FQDN in /etc/hosts. If this does not solve the issue, please submit a ticket at &lt;A href="https://netflowlogic.zendesk.com/home"&gt;https://netflowlogic.zendesk.com/home&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 20 Feb 2013 21:16:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/NetFlow-Integrator-3-1-0-with-splunk-5-0-2-can-t-start/m-p/35685#M6507</guid>
      <dc:creator>NetFlow_Logic</dc:creator>
      <dc:date>2013-02-20T21:16:46Z</dc:date>
    </item>
  </channel>
</rss>

