Deployment Architecture

Splunk cloud indexer port 9997 is not listening for my splunk cloud instance

sivauser
New Member

Splunk cloud indexer port 9997 is not listening for my splunk cloud instance .

Please let me know whether I cannot able to set the indexer port manually in Splunk cloud like Splunk enterprise?

How can I ensure whether the port(9997) is listening for splunk cloud indexer?

Note : I have already open the network flow from my splunk client which the universal forwarder installed (UF --->> Spluk indexer 9997)

Tags (1)
0 Karma
1 Solution

dhihoriya_splun
Splunk Employee
Splunk Employee

Hi @sivauser

In Splunk cloud instance, if port 9997 is down or not listening then you need to raise a support ticket to investigate your issue by Splunk cloud networking team.

you can also check the connection by telnet between your forwarder and Splunk Cloud IP addresses on port 9997 by this way you can get the result that port 9997 is up and listening or not.

View solution in original post

0 Karma

dhihoriya_splun
Splunk Employee
Splunk Employee

Hi @sivauser

In Splunk cloud instance, if port 9997 is down or not listening then you need to raise a support ticket to investigate your issue by Splunk cloud networking team.

you can also check the connection by telnet between your forwarder and Splunk Cloud IP addresses on port 9997 by this way you can get the result that port 9997 is up and listening or not.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

It’s go time — Boston, here we come!

Are you ready to take your Splunk skills to the next level? Get set, because Splunk University is back, and ...

Performance Tuning the Platform, SPL2 Templates, and More New Articles on Splunk ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...