All Apps and Add-ons

estreamer_client ERROR: Remote host closed socket at line 1735


hi all,

while try running the command: perl -c ../default/estreamer.conf -t
so i can test connection with my SourceFire DC, iam getting this error and none logs are exported:

SFPkcs12 : Writing ./server.crt
SFPkcs12 : Writing ./server.key
Retrieving metadata from file ./metadata.dat
Error loading metadata from file (./metadata.dat): at line 1175.
[371] Connecting to 192.168.X.XX port 8302
[371] Opening event stream
Remote host closed socket at line 1735.

i try also to run: but it didnt give any error, even if logs with that time in the log directory are empy:

[31990] Daemonizing process
event_sec=1430490301 status_id=2 status="Started eStreamer client."

any advice or help on how can i solve this issue?

Best Regards

New Member

You have to generate a new client certificate for host where the estreamer client is running

0 Karma


Hi wondering if anyone has solved this...

0 Karma


Here's the fix...
Adding Authentication for eStreamer Clients

link text

0 Karma


noone have ideas or suggestions ?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...