Hi,
I'm trying to congfigure a forwarder and the receiver doesn't get any data. Please help.
Forwarder's outputs.conf: [tcpout] defaultGroup = default-autolb-group
[tcpout:default-autolb-group] server = vm1.sandbox:9997
[tcpout-server://vm1.sandbox:9997]
That was configured using splunk add forward-server command.
Below is the Receivers inputs.conf (configured via Splunk Web>Manager>Forwarding and receiving menu)
[splunktcp://9997] connection_host = ip
Totally a newbie and trying to understand how these components work.
Thanks!