Error message

[sahils]

I am getting below error message.

Forwarding to indexer group primary_indexers blocked for 100 seconds.

Can you please explain why this error message is coming and is there any impact on application.

Thanks,
Sahil

[Raghav2384]

Hello,

Looks like it is not able to communicate to the set of indexers you've pointed it to. See if the target Indexer/Splunk instance is up and running.

Do a telnet to target indexer.

telnet ipaddress 9997 and also look at splunkd.log for any TcpInputProc errors. Hope this helps!

Thanks,
Raghav