Deployment Architecture

ERROR TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf.

ashwinipatil007
New Member

Hi,

I have installed a new Linux forwader but I am not able to see logs from this forwader.

I have set the deploymentclient.conf and restarted the forwader couple of times .
I don't see any logs from this forwader in internal index.
I am getting the below error:

ERROR TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf.

my outputs.conf

[tcpout]
defaultGroup = HF_group

[tcpout:HF_group]
autoLBFrequency=60
server = myserver:9997

I have seen couple of links of enabling the listener port but coudnot fix my issue from that.

P.S my forwader send the logs to Heavy forwader.

Any solution to fix this issue?

Thanks in advance:)

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...