Scribd Logo
Upload

Welcome to Scribd!

  • Use Case-7 - Troubleshooting

    Uploaded by

    junaid
    7 views5 pages
    The document discusses troubleshooting data forwarding issues in Splunk Enterprise. It describes a scenario where the forwarder error logs indicate the indexers are not reachable, with the root cause being that the 9997 port is not open in the security groups for inbound and outbound rules. The solution is to enable the 9997 port in the outbound rules of the forwarder and the inbound rules of the indexer.

    Original Description:

    Original Title

    Use case-7 - Troubleshooting

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses troubleshooting data forwarding issues in Splunk Enterprise. It describes a scenario where the forwarder error logs indicate the indexers are not reachable, with the root cause being that the 9997 port is not open in the security groups for inbound and outbound rules. The solution is to enable the 9997 port in the outbound rules of the forwarder and the inbound rules of the indexer.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    7 views5 pages

    Use Case-7 - Troubleshooting

    Uploaded by

    junaid
    The document discusses troubleshooting data forwarding issues in Splunk Enterprise. It describes a scenario where the forwarder error logs indicate the indexers are not reachable, with the root cause being that the 9997 port is not open in the security groups for inbound and outbound rules. The solution is to enable the 9997 port in the outbound rules of the forwarder and the inbound rules of the indexer.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 5

    Splunk Enterprise

    Troubleshooting
    Use Cases

    7
    Soft Mania

    Data Forwarding Issues


    Issue: Forwarder is not sending data
    Scenario-5: Forwarder error logs say,
    Indexers are not reachable

    @SoftMania #SoftMania
    Soft Mania

    Data Forwarding Issues


    Root Cause:
    9997 port is not open in Security Groups
    inbound & outbound rules.

    @SoftMania #SoftMania
    Soft Mania

    Data Forwarding Issues


    Solution:
    Enable 9997 port in the outbound of the
    Forwarder & inbound of Indexer

    @SoftMania #SoftMania

    You might also like