All Apps and Add-ons

After installing the Splunk App for Windows Infrastructure in an indexer cluster, why are indexers not receiving data?

Yann_T
Path Finder

Hi,

I'm trying to install the Splunk App for Windows Infrastructure.
I tried on a standalone Splunk instance and I got my data, but now I'm trying to do the same thing in a cluster and I do not have anything.

I looked at the splunkd.log and I have a few lines like this :

03-30-2015 10:11:17.087 +0200 ERROR TcpOutputProc - s2s negotiation failed. response='NULL'

Does it tell anyone something? What can I do?

thank you for your help

0 Karma
1 Solution

Yann_T
Path Finder

I had a trouble with my .conf files and Splunk didn't succeed to resolve it.
So, I deleted the wrong file and it worked.

View solution in original post

0 Karma

Yann_T
Path Finder

I had a trouble with my .conf files and Splunk didn't succeed to resolve it.
So, I deleted the wrong file and it worked.

0 Karma

parth995
Loves-to-Learn Lots

which wrong file you deleted ?

which .conf file you had trouble ?

Solution is unclear TBH

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...