I am using Heavy Forwarder to send logs from different sources such as Domain Controller, Windows Servers, Network Switches etc. to Splunk Cloud
I am receiving the following error from the Splunk Cloud
PeriodicHealthReporter - feature="TCPOutAutoLB-0" color=red indicator="s2s_connections" due_to_threshold_value=70 measured_value=100 reason="More than 70% of forwarding destinations have failed. Ensure your hosts and ports in outputs.conf are correct. Also ensure that the indexers are all running, and that any SSL certificates being used for forwarding are correct." node_type=indicator node_path=splunkd.data_forwarding.splunk-2-splunk_forwarding.tcpoutautolb-0.s2s_connections
Does anyone know what is the cause and how to fix it?
... View more