connection aborted error 104 connection reset by peer

[logloganathan]

when i look into the Splunk logs it showing only few logs
other logs are missing with error "connection aborted error 104 connection reset by peer"

Could anyone explain why it occurs?

[logloganathan · Accepted solution]

we need to change the end URL(for getting logs) to fix this issue

[woodcock]

What does this mean? What did you actually change?

[logloganathan]

this is actually issue in end URL. we used old Rest URL that why we not getting logs which throws the error.
we modified that with new Rest URL

[jlvix1]

check over your TLS/SSL certs, config and settings on all endpoints.

[logloganathan]

Could anyone please help?

[poete]

Hi. Are you truing to have allok into the log files or through a search request. In case it is a search request, can you please rovide it?

[logloganathan]

allok means ?
Could you please explain what is that?
we have written some script to get the logs..its not search query..we are not getting logs into index properly

[logloganathan]

Could anyone please help me in this issue

[poete]

So you are using an HEC communication to get the log info in splunk?

[logloganathan]

we are using rest API link to get the log information into the splunk

[poete]

So you did follow this?

[poete]

http://docs.splunk.com/Documentation/SplunkCloud/7.0.0/Data/UsetheHTTPEventCollector#Configure_HTTP_...

[logloganathan]

here what step i need to follow?

[logloganathan]

could anyone please help in this issue?

[logloganathan]

Any update from any one?

[poete]

Sorry that I wrote too fast. allok => a look. So you try to get the logs in Splunk. How are you trying to do that? Through http?

[logloganathan]

we are getting using http