i have solved this problem. It is because i hadn't change my hostname on httpinput. The way to do this is: - Go to "/etc/apps/splunk_httpinput/local/inputs.conf" on your splunk enterprise - add this code line to change your hostname: [default] host = <your-IP> - restart splunk Hope this helps ... View more