Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
79 results
Sorted by:
01-08-2016
07:41 AM
Yesterday I had set up 8 Universal Forwarders on 8 different machines and had them all sending data over to the Receiver just fine. I woke up this morning and got on the receiver and all 8 machines w...
02-14-2020
01:59 PM
...when the heavy forwarder trying to forward the logs to syslog server
WARN TcpOutputProc - Cooked connection to ip=syslog_ip:syslog_port timed out
ERROR TcpOutputFd - Connection to host=s...
09-27-2015
08:30 PM
...- Also, on the not-working system and the heavy forwarder I've run NETSTAT -an to verify that the 2 systems are establishing a connection between each other.
3 - I've dug through the var/logs/s...
12-29-2015
08:47 AM
1 Karma
I have installed a universal forwarder in one laptop and Splunk Enterprise in other laptop in my home. Both are connected via ethernet LAN. I am able to share files and folders between those l...
Show results in replies (4)
-
in the forwarder i see connection timeout error message in the splunkd logs. i have configured t...
-
...an't establish a connection from the forwarder to the indexer on that port I would rule out network i...
-
After enabling the firewall telnet is working and forwarder is able to connect to the indexer. b...
-
Did you open port 9997 in the windows firewall or linux iptables? Just because you are listening...
02-10-2022
11:11 PM
Hi
We have installed Splunk universal forwarder on a remote server but logs are not getting forwarded to Indexer.
I have tried to troubleshoot this issue but could not do so. Can y...
Labels
- Labels:
-
indexer
-
inputs.conf
-
universal forwarder
02-26-2018
04:05 PM
...ead logs from syslog's log folder.
network connection established between Syslog Server and H.F on H.F's port 9997 and 8089.
receiving port 9997 on Indexer enabled.
splunk btool inputs list m...
04-23-2015
07:15 AM
I am getting a TcpOutputFd on the forwarder. Connection to xxx host failed.
4-22-2015 16:17:34.736 -0400 WARN TcpOutputFd - Connect to :9997 failed. Connection refused
04-22-2015 16:17:34.745...
08-26-2015
09:49 PM
This question is simply out of curiosity.
If a Splunk forwarder loses its connection with its receiver (assuming there is only one receiver/no load balancing), does it hang on to the data it's s...
01-27-2015
02:00 AM
...veryone else complains about.
01-27-2015 19:52:39.782 +1000 ERROR TcpOutputFd - Read error. An existing connection was forcibly closed by the remote host.
01-27-2015 19:52:40.942 +1000 INFO T...
03-25-2018
01:44 PM
1 Karma
...nswers, but I haven't found one that pertain to both. It obvious in the error log on the forwarder that the connection is refused however I can telnet to the port 9997. What am I missing? This was all w...
