I'm new to Splunk and setting up Splunk Cloud trial verison.
Have installed a Splunk forwarder on Win 2008 R2 64X machine and followed all steps mentioned in- http://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/ForwardDataToSplunkCloudFromWindows
I did all default setting as explained in Step 1 to 3. But cannot move to step-4.
I'm not able to see the forwarder in the Add Data page.
Error for logs says
10-26-2016 20:38:09.175 -0400 ERROR TcpOutputFd - Connection to host=xx.xxx.xxx.xxx:9997 failed
10-26-2016 20:38:17.075 -0400 INFO DC:DeploymentClient - channel=tenantService/handshake Will retry sending handshake message to DS; err=not_connected
10-26-2016 20:38:21.688 -0400 WARN HttpPubSubConnection - Unable to parse message from PubSubSvr:
10-26-2016 20:38:21.688 -0400 INFO HttpPubSubConnection - Could not obtain connection, will retry after=33.948 seconds.
10-26-2016 20:38:29.076 -0400 INFO DC:DeploymentClient - channel=tenantService/handshake Will retry sending handshake message to DS; err=not_connected
10-26-2016 20:38:39.085 -0400 WARN TcpOutputFd - Connect to xx.xxx.xxx.xxx:9997 failed. No connection could be made because the target machine actively refused it.
What I'm doing wrong?
↧