All,
I am getting this error in a clean install of Splunk on my search head. Curious why this script reaches out to the internet and what it does? How can I disabled it? Should I get my firewall guy to open it up and if so why?
Splunk 7.3.0 on CentOS7
08-01-2019 03:01:32.507 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/splunk_instrumentation/bin/instrumentation.py" HTTPSConnectionPool(host='e1345286.api.splkmobile.com', port=443): Max retries exceeded with url: /1.0/e1345286/0e50cf3b-5fb0-5530-a786-6be76bc16b57/1/0?hash=none (Caused by <class 'socket.error'>: [Errno 111] Connection refused)
host = myserver.mydomain.local
thanks in advance!
-Daniel
Answered by @chrisyoungerjds here: https://answers.splunk.com/answers/719213/splunk-instrumentation-error.html