so netstat -an | grep 9999 which is the port that i used on splunk server showed the traffic is not coming but I see the traffic on my nagios actully sending to that port
you should not be sending data to port 9999, please follow the instructions on
http://splunk-base.splunk.com/apps/22374/splunk-for-nagios
to add the new data inputs
All the best, Luke 🙂