My Splunk enterprise server (v7.2.6) is on RHEL 6. In outputs.conf, tcpout is configured to send data to a remote host (ArcSight). But the Splunk server's metrics.log shows _tcp_Bps etc. all 0.
My Splunk server was able to send data last month. But it stopped recently. What things can I check to trouble-shoot this issue?
