Getting Data In

How to configure flow collector

outis
New Member

When I configure Flow collector on linux_web server for forwarding
Flow collector to server Splunk_server , but I see an error.

I try to fix it but unsuccessful.
Hope everyone can help me. Thanks.

alt text

Tags (2)
0 Karma

ivanreis
Builder

Per the error messages it seems the linux server is not able to find the Splunk server on the DNS server, so try to use the ipaddress of splunk server where the HEC is setup to receive the input for testing purposes.

Here is a link to troubleshoot the HEC connections
https://docs.splunk.com/Documentation/Splunk/7.3.2/Data/TroubleshootHTTPEventCollector#Setting_up_lo...

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...