Splunk Enterprise

errno=33558531 error:02001003:system library:fopen:No such process

martaBenedetti
Explorer

Hi Commmunity,

 

I'm having a problem with a windows Universal Forwarder.

After successfully connecting the forwarder to the deployment server, the app the with files outputs.conf and server.conf is downloaded but no logs are received on the indexer cluster.

From splunkd.log on universal forwarder I see this error:

06-10-2021 17:58:19.885 +0200 ERROR SSLCommon - Can't read certificate file %programfiles%\SplunkUniversalForwarder\etc\auth\xxxxr.pem errno=33558531 error:02001003:system library:fopen:No such process
06-10-2021 17:58:19.885 +0200 ERROR TcpOutputProc - Error initializing SSL context - check splunkd.log regarding configuration error for server indexer:9997

Do you have any idea?

 

Thank you

Marta

Labels (3)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.