Hi. I am new to splunk. I have configured everything. I am trying to solve this issue for 2 days. I have universal forwerder on the ubuntu server with different network. I have downloaded splunk enterprise to my windows 10 computer. My port 9997 is enabled. Firewall is disabled. Even with zyxel interface i bypassed the port 9997. My splunk is listening on port 9997. The thing is with telnet from any other source to my computer (i tried with both my mobile internet and UF client) is still getting denied. How should i proceed to make it work. Im stuck so bad Thanks for your helps this is the mobile internet test with Test-NetConnections to my pc (splunk server i guess) ComputerName : x.x.x.x <desired.connection> RemoteAddress : x.x.x.x <desired connection> RemotePort : 9997 InterfaceAlias : Wi-Fi SourceAddress : X.x.x.x <my ip> PingSucceeded : False PingReplyDetails (RTT) : 0 ms TcpTestSucceeded : False   ... View more

I am newbie to splunk. Any help is appreciated So I have an splunk enterprise in my windows computer. and splunk forwarder in a ubuntu VPS server with a cowrie honeypot built in. So my problem is when i try to ping test my local computer with VPS server , i have %100 packet loss. Also splunkd log file is full of "cooked connection to "my-local-ip" timed out and ... blocked nfor blocked_seconds=3000. This can stall the data flow towards indexing and other network outputs. Review the receiving system's health in the Splunk Monitoring Console. It is probably not accepting data. errors Thanks for helping. I am waiting for your response ... View more