i get further, but at Submit file step for indexing, it silently fails but see a message in splunkd.log WARN HttpListener - Read Timeout communicating with , disconnecting trying to see if another place need to tell splunk to use localhost NOT actual IP ... View more