I signed up for a Splunk Cloud trial, and set up a universal forwarder on one of our EC2 instances. However, I keep getting this in splunkd.log:
ERROR TcpOutputFd - Connection to host=[ip address of input server]:9997 failed
I tried telnet to the ip/port and it was successful, so there should be no network-related issues.
If I go in the admin console to **Settings->Forwarding and Receiving** I see the message:
There was an error retrieving the configuration, can not process this page
Is there some additional configuration on either the admin or on our EC2 instance (universal forwarder) to get this to work? Or does the Splunk Cloud trial not allow contributing data to the instance?
↧