I am trying to use the Splunk for Stream setup (version="6.0.1) on a Universal forwarder.
CentOS 6.5, forwarder/Indexer Splunk release 6.0.2
After the splunk restart, I get the following. Then every 5 seconds I get the 'Unable to ping server' message in streamfwd.log
Found DataDirectory, Found UIDirectory, Loaded configuration file
2014-09-12 14:16:34 ERROR 140563220014848 stream.CaptureServer - Unable to ping server (Unable to establish connection to localhost: Connection refused): a116a931-dc21-49ad-a528-9532f9137826
streamfwd has started successfully (version 6.0.1 build 536)
stream.main - web interface listening on port 8889
Could I be setting the path incorrectly to localhost? I get another error of the same sort when I try and setup the add new
wire data input: (nsg03 is the forwarder server)
SplunkApp for Stream location (I am confused about this entry)
I use the example, except the host name entry for the forwarder
Upon 'Save'
Encountered the following error while trying to save: In handler 'streamfwd': Unable to ping server (Unable to establish connection to name of server: Connection refused): 4a7c6744-f1d1-4752-827b-6314172e7227
At present, I am not seeing how to resolve this error. Anyone else have this issue, and what was your solution?
... View more