We are trying to setup the Splunk app for VMware and on the data collection node we are having issues. We see it as an active forwarder on the OVA server (centOS box), in splunk UI we have the URI - http:(slashslash)localhost:8089, user, password and worker process is 3.
It says "could not reach host"
Not sure what we could be missing
From your scheduler try this:
curl -k https://<DCN>:8089
You should get an XML doc back, if not you have a network problem.
There is a hidden dashboard that may help as well, https:///en-US/app/splunk_for_vmware/hydra_framework_status. Was invaluable for troubleshooting, just make sure you DCN is forwarding it's logs.
my DCN doesnot forward any logs to scheduler
I've setup DCN by following instructions in this page http://docs.splunk.com/Documentation/VMW/3.1.3/Configuration/Createadatacollectionnode
does DCN also runs scheduler ?
in splunk UI we have the URI -
password and worker process is 3.
"localhost" should not be a host name of the virtual machine you created from an ova file.
Try IP address of the virtual machine where DCN is running if you do not have a FQDN to resolve host name.
We just get
Credential Validation: X Could not reach host
Add-on Validation: X Could not reach host
I've followed the docs and the youtube setup video, i just dont see what I'm doing wrong.
Just to do a sanity check:
We have a splunk indexer/searchhead and a deployment server. the localhost is the indexer/sh. Then indexer/sh is a physical machine, the deployment server is a virtual machine.
The problem is some network issue between the indexer and the OVA that we downloaded with the VMware app