https://community.splunk.com/t5/Getting-Data-In/Free-trial-forwarder-problems/m-p/534934#M89740 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/230223">@amir_ma</a>,</P><P>let me understand:</P><UL><LI>you have an Indexers (amir-X55LDB) with a free license,</LI><LI>you have an Heavy Forwarder that gives two messages you shared,</LI><LI>you have an Universal Forwarder that gives the first message you shared;</LI></UL><P>is it correct?</P><P>The first message says the the Forwarders don't reach the Indexer, you can test the connection using telnet from the Forwarders:</P><LI-CODE lang="markup">telnet &lt;ip_indexer&gt; 9997</LI-CODE><P>maybe it's closed the firewall on&nbsp; network or on Indexer, or maybe indexer is in a different network than Forwarders and it its'n reachable; anyway check connections.</P><P>I didn't see the second message, but probably is related to the free license, anyway, if you&nbsp; solve the first problem I think that also the second will be solved.</P><P>Ciao.</P><P>Giuseppe</P> Wed, 06 Jan 2021 09:32:35 GMT gcusello 2021-01-06T09:32:35Z https://community.splunk.com/t5/Getting-Data-In/Free-trial-forwarder-problems/m-p/534918#M89738 <P>Hi,</P><P>I am using a free trial of splunk and I am facing two mean problem when using forwarders (heavy and universal).</P><P>Thanks.&nbsp;</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunk_2.png" style="width: 342px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/12451iB9B4859F095E2E3D/image-size/large?v=v2&amp;px=999" role="button" title="splunk_2.png" alt="splunk_2.png" /></span></P> Wed, 06 Jan 2021 08:02:46 GMT https://community.splunk.com/t5/Getting-Data-In/Free-trial-forwarder-problems/m-p/534918#M89738 amir_ma 2021-01-06T08:02:46Z https://community.splunk.com/t5/Getting-Data-In/Free-trial-forwarder-problems/m-p/534934#M89740 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/230223">@amir_ma</a>,</P><P>let me understand:</P><UL><LI>you have an Indexers (amir-X55LDB) with a free license,</LI><LI>you have an Heavy Forwarder that gives two messages you shared,</LI><LI>you have an Universal Forwarder that gives the first message you shared;</LI></UL><P>is it correct?</P><P>The first message says the the Forwarders don't reach the Indexer, you can test the connection using telnet from the Forwarders:</P><LI-CODE lang="markup">telnet &lt;ip_indexer&gt; 9997</LI-CODE><P>maybe it's closed the firewall on&nbsp; network or on Indexer, or maybe indexer is in a different network than Forwarders and it its'n reachable; anyway check connections.</P><P>I didn't see the second message, but probably is related to the free license, anyway, if you&nbsp; solve the first problem I think that also the second will be solved.</P><P>Ciao.</P><P>Giuseppe</P> Wed, 06 Jan 2021 09:32:35 GMT https://community.splunk.com/t5/Getting-Data-In/Free-trial-forwarder-problems/m-p/534934#M89740 gcusello 2021-01-06T09:32:35Z