Collectd Error After Install - curl_easy_perform status 35

[dperre_splunk]

Hi there,

I have used the script that is contained within the Splunk app for infrastructure and couldnt see the entities populating. After I went to the troubleshooting page located here and looked in the collectd.log I noticed the following error. How can I fix this?

[machine]# tail -f /etc/collectd/collectd.log
[2018-07-13 18:36:52] [error] write splunk plugin: curl_easy_perform failed with status 35
[2018-07-13 18:37:02] [error] write splunk plugin: curl_easy_perform failed with status 35
[2018-07-13 18:37:12] [error] write splunk plugin: curl_easy_perform failed with status 35

[abrown_splunk]

Thanks for the feedback Mickey - I'll see what the engineers think about this one too.

[dperre_splunk]

Hi back at you :).

Proper Fix
In my situation the problem was with my configuration of HEC .
Under Data Inputs >> HTTP Event Collector >> Global Settings
I needed to enable SSL.

Workaround
If I wanted to not have SSL (bad practice) I would need to update my collectd settings under /etc/collectd.conf like below.

##############################################################################
# Customization for Splunk                                                   #
#----------------------------------------------------------------------------#
# This plugin sends all metrics data from other plugins to Splunk via HEC.   #
##############################################################################

<Plugin write_splunk>
           server "192.168.X.X"
           port "8088"
           token "HECTOKEN"
           ssl true
           verifyssl false
</Plugin>

To

##############################################################################
# Customization for Splunk                                                   #
#----------------------------------------------------------------------------#
# This plugin sends all metrics data from other plugins to Splunk via HEC.   #
##############################################################################

<Plugin write_splunk>
           server "192.168.X.X"
           port "8088"
           token "HECTOKEN"
           ssl false
           verifyssl false
</Plugin>