Getting Data In

SPLUNKFORWARDER error

rballan2
Loves-to-Learn Lots

I am getting the below error,

looking the splunkd.log file.

DC:DeploymentClient - channel=tenantService/handshake Will retry sending handshake message to DS; err=not_connected

Please any suggestion ?

 

 

Labels (1)
0 Karma

impurush
Contributor

Looks like a connectivity problem between the forwarder and Deployment Server. Check the connection between both.

0 Karma

rballan2
Loves-to-Learn Lots

The connection between the server (running the Splunkforwarder version 8.0.1) and the DS is working from what I see so far.

0 Karma

rballan2
Loves-to-Learn Lots

 Another issue is: when I run: /opt/splunkforwarder/bin/splunk list guid or list monitor command I do not get any answer back.

0 Karma

rballan2
Loves-to-Learn Lots

I have un-install and re-install Splunkforwarder version 8.0.1 on the Solaris 11.3 server.

It did not help so far regarding the error.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really ...

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...