https://community.splunk.com/t5/Getting-Data-In/HttpListener-Socket-error-from-10-23-132-224-49352-Connection/m-p/465133#M99552 <P>Is there any firewall blocking the communication between the server and HEC's server. Try telnet from the server you're looking to send the logs to the HEC. If it is good, debug it by using curl for HEC</P> <P><CODE>curl -k <A href="http://IP_of_HEC_host:8088/services/collector" target="test_blank">http://IP_of_HEC_host:8088/services/collector</A> -H 'Authorization: Splunk token' -d '{"sourcetype": "sourcetype_of_HEC_configured", "event":"Hello, World!"}'</CODE></P> Mon, 28 Oct 2019 20:11:00 GMT vsai0718 2019-10-28T20:11:00Z https://community.splunk.com/t5/Getting-Data-In/HttpListener-Socket-error-from-10-23-132-224-49352-Connection/m-p/465132#M99551 <P>Hi, I am getting this error and after that HEC stops sending the events to Splunk. Also, seeing these errors - </P> <P>ttpListener - Read Timeout communicating with 10.23.132.224:50926, disconnecting</P> <P>Any idea why events stops coming to SPlunk? </P> Wed, 23 Oct 2019 14:51:41 GMT https://community.splunk.com/t5/Getting-Data-In/HttpListener-Socket-error-from-10-23-132-224-49352-Connection/m-p/465132#M99551 rashi83 2019-10-23T14:51:41Z https://community.splunk.com/t5/Getting-Data-In/HttpListener-Socket-error-from-10-23-132-224-49352-Connection/m-p/465133#M99552 <P>Is there any firewall blocking the communication between the server and HEC's server. Try telnet from the server you're looking to send the logs to the HEC. If it is good, debug it by using curl for HEC</P> <P><CODE>curl -k <A href="http://IP_of_HEC_host:8088/services/collector" target="test_blank">http://IP_of_HEC_host:8088/services/collector</A> -H 'Authorization: Splunk token' -d '{"sourcetype": "sourcetype_of_HEC_configured", "event":"Hello, World!"}'</CODE></P> Mon, 28 Oct 2019 20:11:00 GMT https://community.splunk.com/t5/Getting-Data-In/HttpListener-Socket-error-from-10-23-132-224-49352-Connection/m-p/465133#M99552 vsai0718 2019-10-28T20:11:00Z