Splunk Enterprise

Why is Heavy Forwarder not working?

carlospeto
Engager

Hello Community,

Yesterday i realize that i can't reach my heavy forwarder, i already tried restarting the splunkd service but i still can't   get web access. 

My splunk is running over windows server 2019.

Please, someone can help me ,  i dont know which log should i check or what are usually the first steps?

Thank you for your help.

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

What do you mean by "can't reach"?  Can't reach it from where?  Have you tried connecting from the box the HF is running on?

Check that that HF is running.  Make sure port 8000 is available.  Verify firewalls or proxies are not blocking access to that port.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

carlospeto
Engager

I can't reach the web service and in monitoring console  is not showing HF , i already tried from the server using 127.0.0.1 and it is the same. Looks like is not a network problem because FW, proxies and port are already validated.

Thanks

0 Karma

richgalloway
SplunkTrust
SplunkTrust

What do you mean by "can't reach"?  Can't reach it from where?  Have you tried connecting from the box the HF is running on?

Check that that HF is running.  Make sure port 8000 is available.  Verify firewalls or proxies are not blocking access to that port.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...