I have installed a universal forwarder in one laptop and Splunk Enterprise in other laptop in my home. Both are connected via ethernet LAN. I am able to share files and folders between those laptops, but Splunk forwarding is not working. I have verified the set up going through the Splunk Answers and it is correct. When I do a netstat on the receiver for the port 9997, it shows that it is listening on that port, but the output is like
netstat -an | find "9997"
TCP 0.0.0.0:9997 0.0.0.0:9997 LISTENING
Is this correct? Also, I am able to do a telnet to the receiver from forward through this port, but other few ports that I have are working.
telnet command used:
telnet :9997
Can someone help me on how to resolve this? Been struggling to find the answer for quite a while.
↧