Splunk Indexer Error

abhijitnath89ax — Thu, 05 Nov 2020 09:54:41 GMT

We received the below error in splunkd.log on our indexer server. We are using cluster env with 6 indexers. The indexers are coming up and down

11-05-2020 07:23:03.304 +0000 ERROR TcpInputProc - Error encountered for connection from src=X.X.X.X:60116. Broken pipe

Re: Splunk Indexer Error

nwuest — Wed, 11 Nov 2020 07:19:41 GMT

Hi @abhijitnath89ax,

After doing some researching about the error you have depicted could be related to the indexers trying to see if the others indexers/receivers are "alive" named a heartbeat function.

View solution in original post by @hliakathali_spl

Would there happen to be a firewall change either in the network and/or a firewall change on the Splunk Indexers themselves that are prohibiting the connection between them?

We hope to hear back from you!

V/R,

nwuest

topic Splunk Indexer Error in Monitoring Splunk

Splunk Indexer Error

Re: Splunk Indexer Error