Cisco eStreamer for Splunk: Unable to get eStreamer logs, how to resolve error "IO::Socket::INET6 configuration failederror:00000000:lib(0):func(0):reason(0)"?

[deepashri_123]

Hi,

I have configured Cisco eStreamer for Splunk App in a single server deployment. The perl scripts ./estreamer_client.pl is running and also all the perl modules have been installed. The client status shows Running on the dashboard.
The $SPLUNK_HOME$/etc/apps/eStreamer/log/ folder is empty, even though the app seems to have been configured properly.

The debug logs in /etc/apps/eStreamer/bin/estreamer_debug.log shows following error
"Can't connect to 10.10.10.10 port 8302: IO::Socket::INET6 configuration failederror:00000000:lib(0):func(0):reason(0)"

Kindly help with the issue!
What is the path of the script which is used to pull logs? Maybe we can run it manually to help troubleshoot.

[douglashurd]

A new Splunk Firepower solution is now available if you are using Firepower version 6.x. You can download the new eStreamer eNcore for Splunk and the separately installable dashboard from the two links below:

eStreamer eNcore
https://splunkbase.splunk.com/app/3662/

eNcore Dashboard
https://splunkbase.splunk.com/app/3663/

It is free to use and well documented but if you would like to purchase a TAC Support service so that you can obtain installation and configuration assistance and troubleshooting you can order the software from Cisco (support obligatory with this purchase). The Product Identifier is: FP-SPLUNK-SW-K9.

Regardless of whether you take up the support option or not, updated versions will be made available to all free of charge and posted on Splunkbase as well as Cisco Downloads.