topic Re: Connection issues: when I created a new indexer, our data is not showing up. in Getting Data In

Connection issues: when I created a new indexer, our data is not showing up.

snallam123 — Fri, 22 Feb 2019 19:43:39 GMT

There are a couple of indexes in inputs.conf.

I just added a new index with a new port. All other indexes are working fine and servers can send data to indexes. The problem is with the newly added one. When I do telnet from universal forwarder to indexer, all other ones are establishing a connection, but I can't establish a connection to the new one.

Am I missing something here? Can someone figure out where the problem is?

Thanks a lot in advance.

Re: Connection issues: when I created a new indexer, our data is not showing up.

MuS — Fri, 22 Feb 2019 19:54:51 GMT

Check on the indexer if to port is open (assuming *nix so use `netstat -an | grep )
Check if there is a local firewall blocking the new port on the indexer
Check if any other firewall is blocking the connection from your uf to the idx

cheers, MuS

Re: Connection issues: when I created a new indexer, our data is not showing up.

ddrillic — Fri, 22 Feb 2019 20:00:20 GMT

The following can help I can't find my data!

Re: Connection issues: when I created a new indexer, our data is not showing up.

snallam123 — Fri, 22 Feb 2019 20:36:34 GMT

@MuS Thanks for comment, Source and dest servers are connected locally. When created last indexes i did not open any port, But connections went well. The port number i am using is not open but i heard from network guys like when i get data on that port it should be fine.

Re: Connection issues: when I created a new indexer, our data is not showing up.

MuS — Fri, 22 Feb 2019 21:45:23 GMT

I quite don't get it want you are saying here ¯\_(ツ)_/¯

First you say you cannot connect, then the servers are connected locally but no port open?

So, does it work now or not?

Re: Connection issues: when I created a new indexer, our data is not showing up.

snallam123 — Fri, 22 Feb 2019 22:04:18 GMT

Sorry for confusion, Out of 9 indexes one is not working, did same configuration for all. all indexes are having different ports [6581-6590]. No firewall for these servers(contacted with network team).

Re: Connection issues: when I created a new indexer, our data is not showing up.

bpadmanbhachari — Mon, 25 Feb 2019 04:20:55 GMT

If telnet is not connecting to new indexer then you need to check two things.
1. Check if port is enabled on forwarder and indexer using "netstat -an |grep "port" command.
2. Check if you have any third party firewall on indexer end refusing the connection.
3. If port is fine and enabled check if you have enabled receiving on indexer end for that port. On indexer GUI>> settings >> forwarding and receiving >> receiving >> enable the port.