Data Forwarding Issues:
Issue: Forwarder is not sending data
Scenario 2: Forwarder is running & was sending data earlier, has all the access
Root Cause:
Forwarder had indexer IP in outputs.conf, the corresponding indexer was down
Solution:
Bring up the Indexer
(or)
Enable Indexer Discovery
Step-1:
In Cluster Manager node, edit the “server.conf” file.
Step-2:
In Forwarder node, edit the “outputs.conf” file.