we have some Universal forwarder Agents installed in servers in different domains , server team done patching on those servers and post patching or Server reboot , these are not reporting logs . Ours is distributed environment with search head cluster . i have checked for splunk agent services those are running fine and tried restarting the services still no logs have been reported . below is the log which it is generating
11-20-2017 23:57:27.697 +0530 WARN TcpOutputProc - Cooked connection to ip=XXXXXXX timed out
11-20-2017 23:57:47.714 +0530 WARN TcpOutputProc - Cooked connection to ip=XXXXXXXX timed out
11-20-2017 23:58:07.715 +0530 WARN TcpOutputProc - Cooked connection to ip=XXXXXXXX timed out
11-20-2017 23:58:27.043 +0530 INFO DC:DeploymentClient - channel=tenantService/handshake Will retry sending handshake message to DS; err=not_connected .
I just tried re installing the agent still nothing . configuration end nothing has changed .
↧
