Troubleshooting » History » Version 3
Luke Murphey, 06/19/2019 06:52 PM
| 1 | 1 | Luke Murphey | h1. Troubleshooting |
|---|---|---|---|
| 2 | 1 | Luke Murphey | |
| 3 | 2 | Luke Murphey | h2. The input isn't responding |
| 4 | 1 | Luke Murphey | Run the following search to see why the input may not be working: |
| 5 | 1 | Luke Murphey | |
| 6 | 1 | Luke Murphey | <pre> |
| 7 | 1 | Luke Murphey | (index=_internal sourcetype=ftp_modular_input) OR (sourcetype=ftp) |
| 8 | 1 | Luke Murphey | </pre> |
| 9 | 2 | Luke Murphey | |
| 10 | 2 | Luke Murphey | h2. The input doesn't seem to listen correctly on Windows (and you are having the input listen all interfaces such as "0.0.0.0") |
| 11 | 2 | Luke Murphey | |
| 12 | 2 | Luke Murphey | The FTP server will attempt to listen on a port as denoted by your hostname. You should be able to connect to your host by it's hostname as opposed to the IP address. I recommend changing the input to listen on a particular port f this still doesn't work for you. |
| 13 | 3 | Luke Murphey | |
| 14 | 3 | Luke Murphey | h2. The input doesn't seem to listen correctly on Linux (on a port less than 1024 when running Splunk with a non-root user) |
| 15 | 3 | Luke Murphey | |
| 16 | 3 | Luke Murphey | Linux/Unix does not allow non-root users to open a port less than 1024 by default. See https://www.geeksforgeeks.org/bind-port-number-less-1024-non-root-access/ for details on how to get around this issue. |