Hello,
I'm trying to send data from a directory on a server to Splunk Cloud using the universal forwarder. This traffic goes through a squid proxy. I've tried to configure the proxy in server.conf:
[proxyConfig]
http_proxy = http//:8080
https_proxy = https//:8080
Port 8080 is open for tcp traffic.
I am able to connect from the server to the proxy using telnet, I am not able to connect to the indexers using telnet, however this should be possible while connecting from the universal forwarder using the forwarder credentials package, right?
The forwarder seems to be unable to connect to the indexers. splunkd file has the following warnings:
TcpOutputProc - 'sslCertPath' deprecated; use 'clientCert' instead..
Cooked connection to ip=:9997 timed out.
In the splunkd text file I don't see anything about the proxy I configured either, should this show in the splunkd file?
Does anyone have an idea on how to troubleshoot this issue?
Thanks, kind regards,
Willem Jongeneel
↧