Deployment Architecture

pipelineInputChannel - ended without a done key

sdevadas
Path Finder

I keep getting these in the logs for a particular client where we have setup a scripted input which delivers the data through the light forwarder.

11-03-2010 16:13:24.763 WARN  PipelineInputChannel - channel "source::tcp:9903|host::PRDBNN301||remoteport::52186" ended without a done-key
11-03-2010 16:13:24.763 WARN  PipelineInputChannel - channel "source::s2s|host::PRDBNN301|s2s|remoteport::52186" ended without a done-key
11-03-2010 16:13:24.763 WARN  PipelineInputChannel - channel "source::wmi|host::PRDBNN301|wmi|remoteport::52186" ended without a done-key

The data from this client does not seem to reach the indexer (at least I cant search for it). This seems to work well in development.

Any pointers would be appreciated.

Splunk 4.1.5 Windows 2003 R2

Tags (1)

Lowell
Super Champion

sdevadas
Path Finder

I changed from the light forwarder to the heavy one and things work well.

0 Karma
Get Updates on the Splunk Community!

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

What's New in Splunk Observability - October 2025

What’s New?    We’re excited to announce the latest enhancements to Splunk Observability Cloud and share ...