Getting Data In

Log4j2-TF-7-AsyncLoggerConfig-4 ERROR Unable to send HTTP in appender [Splunk] Connection timed out: connect

sknjc
New Member

Hello Support

I am trying to configure my mule application with the below configuration in LOG4J2. I am getting the below error message and logs are not writing to Splunk. Please help. Splunk is configured on a cloud server.

Log4j2 configuration

<Http name="Splunk" url="http://<server>:8088/services/collector/raw">
<Property name="Authorization" value="Splunk <token>" ></Property>
<PatternLayout pattern="%-5p %d [%t] %X{correlationId}%c: %m%n" ></PatternLayout>
</Http>

 

<AsyncRoot level="INFO">
<AppenderRef ref="file" />
<AppenderRef ref="Splunk" ></AppenderRef>
</AsyncRoot>

Error Message

2020-06-24 01:02:47,675 Log4j2-TF-7-AsyncLoggerConfig-4 ERROR Unable to send HTTP in appender [Splunk] java.net.ConnectException: Connection timed out: connect

sknjc_0-1592940716693.png

 

Best Regards

Sandeep

Labels (1)
0 Karma

Tanmay049
Engager

Hi Vikas, I'm using splunk cloud and uncheck the SSL is disabled, so what should i do?

Kind regards,

Tanmay

0 Karma

vikaspuri
Engager

Hi Sandeep,

Please make sure that in splunk there is Global Setting, go there and uncheck the SSL, as HTTP is not ssl enabled which will cause issue. 

Hope it will work!

Kind regards,

Vikas

Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...