Installation

Splunk server not sending out data

tigger8
Loves-to-Learn Lots

My Splunk enterprise server (v7.2.6) is on RHEL 6. In outputs.conf, tcpout is configured to send data to a remote host (ArcSight). But the Splunk server's metrics.log shows _tcp_Bps etc. all 0.

My Splunk server was able to send data last month. But it stopped recently. What things can I check to trouble-shoot this issue?  

Tags (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...