splunk indepandent stream forwarder send error (HTTPRequestSender.cpp:1459)

jiminkim33 — Wed, 27 Dec 2023 05:28:02 GMT

Trying to connect to a Splunk independent stream forwarder to Stream forwarder Search Header

023-12-27 13:52:47 ERROR [140302542051072] (HTTPRequestSender.cpp:1459) stream.SplunkSenderHTTPEventCollector - (#1) Failing over to disk
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:717) stream.SplunkSenderHTTPEventCollector - (#2) Resetting blocked connection
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:717) stream.SplunkSenderHTTPEventCollector - (#3) Resetting blocked connection
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:1485) stream.SplunkSenderHTTPEventCollector - (#2) TCP connection failed: Operation canceled
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:1485) stream.SplunkSenderHTTPEventCollector - (#3) TCP connection failed: Operation canceled

enable Stream forwarder Search Header ssl : same error

disable Stream forwarder Search Header ssl : same error

What could be the problem?

[Independant stream forwarder]

inputs.conf

[streamfwd://streamfwd]
splunk_stream_app_location = http://192.168.0.111:8000/en-us/custom/splunk_app_stream/

streamfwd.conf

[streamfwd]
port = 8889
ipAddr = 192.168.0.112

[Stream forwarder Search Header]

splunk_httpinput/local/input.conf

[http://streamfwd]
disabled = 0
token = 5aa1c706-2bcd-4f90-857b-636c8afab1f5
index = streamfwd
indexes = streamfwd
sourcetype = stream

[http]
disabled = 0
port = 8088
enableSSL = 1

* Stream forwarder Search Header, independent stream forwarder OS : Linux (CentOS 7)

topic splunk indepandent stream forwarder send error (HTTPRequestSender.cpp:1459) in Installation

splunk indepandent stream forwarder send error (HTTPRequestSender.cpp:1459)