Install Splunk - no problems
Install Splunk Add-on for Zenoss through GUI - no problem
Go to settings -> data inputs -> fill out the form
Get this:
Encountered the following error while trying to save: In handler 'zenoss_events': Failed to connect to http://zenoss address:8080 and query for an event - Verify username, password and web interface address are correct
Verified that the Splunk server can ping Zenoss. Tried on three different administrative accounts.
Any thoughts?
It looks to me like you have the incorrect URI for your Zenoss server in your config, unless you're just not exposing it here.
http://zenoss address:8080
That's not going to resolve (space in the URI).
What version of Zenoss are you on? In Zenoss 5.x+ they moved away from port 8080 to a URI with no port and https. Make sure you can resolve the web address for Zenoss and it's the same address you use to access the Zenoss console.
From the docs:
Zenoss Web Interface: Web interface to Zenoss server; e.g.http://zenoss-server:8080 or https://zenoss5.myhost.mydomain for Zenoss 5.x connections.
You can ping, but can you telnet to port 8080 from your splunk instance to your zenoss instance?
So I can ping and now telnet to zenoss from the splunk server but I get the same results. I reinstalled splunk and the plugin and still get the same answer. I can't seem to find any other instance of this. Any one who can help?