Installation

INFO PeriodicHealthReporter - feature="TCPOutAutoLB-0" color=yellow due_to_stanza="feature:s2s_autolb" due_to_indicator="s2s_connections" node_type=feature node_path=splunkd.data_forwarding.splunk-2-splunk_forwarding.tcpoutautolb-0

vikkysplunk
Path Finder

Hi Team,

I am getting below error in Splunk UI also i am not able to see new events in indexer since last 3 days.

04-08-2019 01:12:20.811 -0500 INFO PeriodicHealthReporter - feature="TCPOutAutoLB-0" color=yellow due_to_stanza="feature:s2s_autolb" due_to_indicator="s2s_connections" node_type=feature node_path=splunkd.data_forwarding.splunk-2-splunk_forwarding.tcpoutautolb-0

Note : Splund running fine.

Tags (1)

highsplunker
Contributor

Hi ! Did you solve the problem? Please tell us how?

See also - https://answers.splunk.com/answers/746643/tcpoutautolb-0-more-than-70-of-forwarding-destinat.html

In my case, i'm SURE it's not about network connections (they are OK).
In my case it's probably becase i enlarged RAM and CPU capabilities.
Guys could you comment on this?

0 Karma

DavidHourani
Super Champion

@highsplunker please post a new question with details about your outputs.conf configuration, splunk version, any related error logs from _internal index.
@vikkysplunk it's be great if you can provide the same

0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...