Getting Data In

Issue in using same VM for Intermediate Splunk Deployment Server and forwarder

ssankeneni
Communicator

Are there any know issues in using the same machine for Splunk deployment server and Splunk Universal Forwarder ?
Currently when I'm trying to connect to the deployment server from this machine I'm getting the following errors.

08-12-2013 18:20:12.619 -0500 DEBUG DeploymentClient - attempting handshake
08-12-2013 18:20:12.619 -0500 WARN DeploymentClient - Unable to send handshake message to deployment server. Error status is: not_connected
08-12-2013 18:20:12.619 -0500 DEBUG DeploymentClient - Handshake not yet finished. will continue retrying with a rate of '12000 secs'
08-12-2013 18:20:24.623 -0500 DEBUG DeploymentClient - PhoneHomeThread woke up

0 Karma

lukejadamec
Super Champion

How long have you waited? I've seen splunk get itself out of this sequence.

0 Karma

ssankeneni
Communicator

Actually it took a while for me to see the changes even though I restarted it twice. It automatically rectified itself.
Thanks for the reply.

0 Karma

lukejadamec
Super Champion

How long have you waited? I've seen splunk get itself out of this sequence.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...