Getting Data In

Has anyone installed a universal forwarder 6.1.2 on Windows OS 2008 and experienced problems?

mireyaco
New Member

Hi,

I have Splunk 5.0.5 installed on a Windows OS 2012

I have a windows 2008 64-bit with splunkforwarder-6.1.2-213098-x64-release.msi bits installed but it is not forwarding data to Splunk.

Any clues on what could be wrong?
- I checked that the firewall is not blocking the connection.
- I checked on Splunk that it is accepting data on port 9997
- The event logs are not displaying error messages on either server.

Does anyone know what else I need to check?

Thanks,

MCO

0 Karma

amiracle
Splunk Employee
Splunk Employee

One of the first things I would check is the time on the server. This happened to me many times and I realized that the time on my forwarder was wrong which is why I was not seeing any data flowing to my indexer. Check out the link below and that might help you out.

http://defaultreasoning.com/2009/11/16/synchronize-time-with-external-ntp-server-on-windows-server-2...

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...