Data Forwarding Issues - Splunk Troubleshooting Use Case - 7

13.06.24 10:43 PM - By Murugan

Data Forwarding Issues

Issue: Forwarder is not sending data
Scenario-5: Forwarder error logs say, Indexers are not reachable
Root Cause:
9997 port is not open in Security Groups inbound & outbound rules.
Solution:
Enable 9997 port in the outbound of the Forwarder & inbound of the Indexer

Murugan