Monitoring Splunk

How to resolve this error: TCPOutAutoLB-0 - More than 70% of forwarding destinations have failed

bugnet
Path Finder

Hi all,

I have Splunk instance (standalone) which I get the following error:

alt text

On the forwarding server the outputs.conf is OK. Beside that port 9999 is not open.

Labels (1)
Tags (1)

pdouglasjr
New Member

Are you using HTTPS? And if so, have the certificates configured for HTTPS been recently updated?

0 Karma

saichaitanya
New Member

recently I enable the ssl and sso for the HF  when we  open that Hf the error is showing that below error

 

TCPOutAutoLB-0 - More than 70% of forwarding destinations have failed

 

please give me the solution.. ASAP

thank  you 

0 Karma

highsplunker
Contributor

Hi ! Did you solve the problem? Please tell us how? With vikramyadav's answer below?

In my case, i'm SURE it's not about network connections (they are OK).
In my case it's probably becase i enlarged RAM and CPU capabilities.
Guys could you comment on this?

0 Karma

vikramyadav
Contributor

You are trying to forward some data, But you are not able to forward your data because your firewall is blocking so you can open your 9999 port.
For Windows click on below link
https://www.tomshardware.com/news/how-to-open-firewall-ports-in-windows-10,36451.html

And for Linux click below
https://www.cyberciti.biz/faq/howto-rhel-linux-open-port-using-iptables/

If you directly disable your firewall you don't have to follow the above steps, But I won't recommend this step as its harmful.

Thank You.

Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...