Splunk logging driver for Docker - EOF error

[shashinandan]

Hi,

I am facing a strange issue. The HEC setup to send container logs to splunk intermittently posts below error. There are logs indexed on splunk too, but not sure why this warning is being sent each time.

dockerd: time="2021-04-26T15:57:00.437718332-07:00" level=warning msg="Error while sending logs" error="Post https://<ip>:8088/services/collector/event/1.0: EOF" module=logger/splunk
dockerd: time="2021-04-26T15:57:00.477768784-07:00" level=warning msg="Error while sending logs" error="Post https://<ip>:8088/services/collector/event/1.0: EOF" module=logger/splunk
dockerd: time="2021-04-26T15:57:00.490481248-07:00" level=warning msg="Error while sending logs" error="Post https://<ip>:8088/services/collector/event/1.0: EOF" module=logger/splunk
dockerd: time="2021-04-26T15:57:00.521367609-07:00" level=warning msg="Error while sending logs" error="Post https://<ip>:8088/services/collector/event/1.0: EOF" module=logger/splunk
dockerd: time="2021-04-26T15:57:00.829805769-07:00" level=warning msg="Error while sending logs" error="Post https://<ip>:8088/services/collector/event/1.0: EOF" module=logger/splunk

Can you please let me know what is the issue? According to docker guys, this will cause network clogs in the docker swarm and will affect running containers.

Thanks

Shashi