Getting Data In

Getting a "TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf." error.

Explorer

Here is my outputs.conf :

[tcpout]
server=myserver.com:9997

Not sure, why we are receiving this error when we have our outputs.conf file setup in etc/system/local.

TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf.

Thanks.

0 Karma
1 Solution

Splunk Employee
Splunk Employee

Give this a try in your outputs.conf and don't forget to restart Splunk after making this change:

[tcpout]
defaultGroup = splunk

[tcpout:splunk]
server = my_server:9997

Here's the docs link for outputs.conf for your review, you can review the needed stanzas starting at "TCP Output stanzas" in this doc:
http://docs.splunk.com/Documentation/Splunk/6.3.3/Admin/Outputsconf

View solution in original post

Splunk Employee
Splunk Employee

Give this a try in your outputs.conf and don't forget to restart Splunk after making this change:

[tcpout]
defaultGroup = splunk

[tcpout:splunk]
server = my_server:9997

Here's the docs link for outputs.conf for your review, you can review the needed stanzas starting at "TCP Output stanzas" in this doc:
http://docs.splunk.com/Documentation/Splunk/6.3.3/Admin/Outputsconf

View solution in original post

Ultra Champion

This part is critical "don't forget to restart Splunk after making this change"

0 Karma

Explorer

Awesome, this worked for me guys. Thanks!

0 Karma