After defining a source type in the heavy forwarder, why am I getting the following socket error?: HttpListener - "Socket error from 127.0.0.1 while accessing /servicesNS/nobody/search/data/inputs/rest/***/: Broken pipe"

[premraj_vs]

I am using a REST application in Splunk. Below are the steps.

1. Adding a data input via REST and the response in JSON.
2. This application is in heavy forwarder
3. Option 1 - I use default JSON as source type - Working fine
4. Option 2 - i defined a source type in heavy forwarder and i am getting this socket error

Any help is much appreciated !!

[prakash007]

This seems to be an issue with ulimits..

https://answers.splunk.com/answers/105292/what-is-the-cause-of-these-socket-errors-reported-in-splun...
https://answers.splunk.com/answers/204320/httplistener-socket-error-from-127001-broken-pipe.html

https://answers.splunk.com/answers/105292/what-is-the-cause-of-these-socket-errors-reported-in-splun...
https://answers.splunk.com/answers/204320/httplistener-socket-error-from-127001-broken-pipe.html