<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: TcpOutputProc - Cooked connection to ip=timed out in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160744#M98019</link>
    <description>&lt;P&gt;Thanks i have found the issue network team not enabled VPN firewall rules that is the pronlem&lt;BR /&gt;
Data center firewalls would cause the from VPN issue for splunk that should all be allowed now&lt;/P&gt;</description>
    <pubDate>Thu, 26 Feb 2015 21:59:59 GMT</pubDate>
    <dc:creator>brod_geico</dc:creator>
    <dc:date>2015-02-26T21:59:59Z</dc:date>
    <item>
      <title>TcpOutputProc - Cooked connection to ip=timed out</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160742#M98017</link>
      <description>&lt;P&gt;Im getting below error on my heavy forwarder logs, 6 indexers are connect that HF , 4 indexers are working fine.&lt;BR /&gt;
Only problem with 2 indexers and the same indexers are working fine for other network servers.This issue only one location.&lt;BR /&gt;
TcpOutputProc - Cooked connection to ip=x.x.x.x.:9997 timed out&lt;/P&gt;

&lt;P&gt;As pert of troubleshooting i have done all below things.&lt;/P&gt;

&lt;P&gt;Added splunk:TCP ports to indexer inputs.conf and try to accept it IP|DNS|NONE but no luck.&lt;BR /&gt;
/etc/hosts files updated the FQDN name on both sides.&lt;BR /&gt;
Ping and trace root working fine.&lt;BR /&gt;
All the ports are opened and FW rules are enabled.&lt;BR /&gt;
Any thing im missing here?&lt;/P&gt;</description>
      <pubDate>Thu, 26 Feb 2015 19:55:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160742#M98017</guid>
      <dc:creator>brod_geico</dc:creator>
      <dc:date>2015-02-26T19:55:55Z</dc:date>
    </item>
    <item>
      <title>Re: TcpOutputProc - Cooked connection to ip=timed out</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160743#M98018</link>
      <description>&lt;P&gt;Check your indexers queue, whether indexers queues are running full.&lt;/P&gt;</description>
      <pubDate>Thu, 26 Feb 2015 20:37:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160743#M98018</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2015-02-26T20:37:04Z</dc:date>
    </item>
    <item>
      <title>Re: TcpOutputProc - Cooked connection to ip=timed out</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160744#M98019</link>
      <description>&lt;P&gt;Thanks i have found the issue network team not enabled VPN firewall rules that is the pronlem&lt;BR /&gt;
Data center firewalls would cause the from VPN issue for splunk that should all be allowed now&lt;/P&gt;</description>
      <pubDate>Thu, 26 Feb 2015 21:59:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160744#M98019</guid>
      <dc:creator>brod_geico</dc:creator>
      <dc:date>2015-02-26T21:59:59Z</dc:date>
    </item>
    <item>
      <title>Re: TcpOutputProc - Cooked connection to ip=timed out</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160745#M98020</link>
      <description>&lt;P&gt;It was a firewall issue for me too. &lt;/P&gt;</description>
      <pubDate>Mon, 11 Apr 2016 19:50:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/TcpOutputProc-Cooked-connection-to-ip-timed-out/m-p/160745#M98020</guid>
      <dc:creator>aliakseidzianis</dc:creator>
      <dc:date>2016-04-11T19:50:16Z</dc:date>
    </item>
  </channel>
</rss>

