Monitoring Splunk

What is causing this: ERROR TcpOutputFd - Read error. Connection reset by peer?

eswara9
Explorer

ERROR TcpOutputFd - Read error. Connection reset by peer
09-16-2022 06:13:35.552 +0000 INFO TcpOutputProc - Connection to 111.11.11.111:9997 closed. Read error. Connection reset by peer

I see the above error in the forwarder log and ingestion is not happening.
using Splunk version is 8.0.2
modified outputs.conf but still have the same error

Labels (2)
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...