Hi there,
I have used the script that is contained within the Splunk app for infrastructure and couldnt see the entities populating. After I went to the troubleshooting page located here and looked in the collectd.log I noticed the following error. How can I fix this?
[machine]# tail -f /etc/collectd/collectd.log
[2018-07-13 18:36:52] [error] write splunk plugin: curl_easy_perform failed with status 35
[2018-07-13 18:37:02] [error] write splunk plugin: curl_easy_perform failed with status 35
[2018-07-13 18:37:12] [error] write splunk plugin: curl_easy_perform failed with status 35
Thanks for the feedback Mickey - I'll see what the engineers think about this one too.
Hi back at you :).
Proper Fix
In my situation the problem was with my configuration of HEC .
Under Data Inputs >> HTTP Event Collector >> Global Settings
I needed to enable SSL.
Workaround
If I wanted to not have SSL (bad practice) I would need to update my collectd settings under /etc/collectd.conf like below.
##############################################################################
# Customization for Splunk #
#----------------------------------------------------------------------------#
# This plugin sends all metrics data from other plugins to Splunk via HEC. #
##############################################################################
<Plugin write_splunk>
server "192.168.X.X"
port "8088"
token "HECTOKEN"
ssl true
verifyssl false
</Plugin>
To
##############################################################################
# Customization for Splunk #
#----------------------------------------------------------------------------#
# This plugin sends all metrics data from other plugins to Splunk via HEC. #
##############################################################################
<Plugin write_splunk>
server "192.168.X.X"
port "8088"
token "HECTOKEN"
ssl false
verifyssl false
</Plugin>