I have several forwarders, all installed on Ubuntu 14.04 boxes. One of them stopped working but the rest are fine. After troubleshooting, the only difference on the one not working from the others is that when I try these commands:
./splunk list forward-server
./splunk show deploy-poll
I get an error which is "Couldn't complete HTTP request: Connection timed out"
These commands work on my other forwarders and immediately ask me for my credentials. When I try these commands on the box that isn't working, it takes about 30 seconds and then gives me that error. I can't find any information about this error online (I find the error but not anything about why a connection would time out. The outputs.conf file is the same on every box and any other .conf file I know about is the same.
Anyone know what would cause this or even a log file I can view that might give me a clue? Thanks!
... View more