Getting this errror in Heavy forwarder logs:
02-06-2020 18:28:00.283 +0000 INFO TcpOutputProc - Connected to idx=x.x.x.x:9997, pset=0, reuse=0.
02-06-2020 18:28:08.696 +0000 ERROR HttpInputDataHandler - Parsing error : Server is busy
02-06-2020 18:28:08.703 +0000 ERROR HttpInputDataHandler - Parsing error : Server is busy
02-06-2020 18:28:09.881 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying...
02-06-2020 18:28:16.717 +0000 ERROR HttpInputDataHandler - Parsing error : Server is busy
02-06-2020 18:28:16.725 +0000 ERROR HttpInputDataHandler - Parsing error : Server is busy
02-06-2020 18:28:20.075 +0000 WARN TcpOutputProc - The TCP output processor has paused the data flow. Forwarding to output group US-EAST-1-INDEXER-CLUSTER has been blocked for 10 seconds. This will probably stall the data flow towards indexing and other network outputs. Review the receiving system's health in the Splunk Monitoring Console. It is probably not accepting data.
02-06-2020 18:28:21.717 +0000 ERROR HttpInputDataHandler - Parsing error : Server is busy
02-06-2020 18:28:21.726 +0000 ERROR HttpInputDataHandler - Parsing error : Server is busy
02-06-2020 18:28:24.881 +0000 INFO TailReader - ...continuing.
02-06-2020 18:28:29.847 +0000 INFO TcpOutputProc - Connected to idx=x.x.x.x:9997, pset=0, reuse=0.
No error spotted in indexer logs.
Data is being received via HTTP Event Collector on Heavy Forwarder.
... View more