Getting Data In

Trouble receiving information over TCP port

Golloway14
New Member

My IT department is currently attempting to set up a Splunk server. We have a Linux server forwarding to our Splunk server over a TCP port. The Linux server says it is forwarding to the server and our splunk server is receiving on the correct port but we are unable to get any information. Are there any common errors that we could be making? I tried searching for solutions to this problem but unfortunately came up empty handed.

Tags (4)
0 Karma

Ayn
Legend

Check splunkd.log for errors. A common error is to setup the wrong kind of port - you should be setting up a receiving port under "forwarding and receiving" instead of setting up a raw TCP input - or, in config file language, you want to use a splunktcp input, not tcp.

Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...

From GPU to Application: Monitoring Cisco AI Infrastructure with Splunk Observability ...

AI workloads are different. They demand specialized infrastructure—powerful GPUs, enterprise-grade networking, ...

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...