Trying to connect to a Splunk independent stream forwarder to Stream forwarder Search Header
023-12-27 13:52:47 ERROR [140302542051072] (HTTPRequestSender.cpp:1459) stream.SplunkSenderHTTPEventCollector - (#1) Failing over to disk
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:717) stream.SplunkSenderHTTPEventCollector - (#2) Resetting blocked connection
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:717) stream.SplunkSenderHTTPEventCollector - (#3) Resetting blocked connection
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:1485) stream.SplunkSenderHTTPEventCollector - (#2) TCP connection failed: Operation canceled
2023-12-27 13:52:48 WARN [140302542051072] (HTTPRequestSender.cpp:1485) stream.SplunkSenderHTTPEventCollector - (#3) TCP connection failed: Operation canceled
enable Stream forwarder Search Header ssl : same error
disable Stream forwarder Search Header ssl : same error
What could be the problem?
[Independant stream forwarder]
inputs.conf
[streamfwd://streamfwd]
splunk_stream_app_location = http://192.168.0.111:8000/en-us/custom/splunk_app_stream/
streamfwd.conf
[streamfwd]
port = 8889
ipAddr = 192.168.0.112
[Stream forwarder Search Header]
splunk_httpinput/local/input.conf
[http://streamfwd]
disabled = 0
token = 5aa1c706-2bcd-4f90-857b-636c8afab1f5
index = streamfwd
indexes = streamfwd
sourcetype = stream
[http]
disabled = 0
port = 8088
enableSSL = 1
* Stream forwarder Search Header, independent stream forwarder OS : Linux (CentOS 7)
