The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Previous Topic: Asking for recommendation: Unix vs Windows | Next Topic: Splunk on AIX 6.1
Posts 1–5 of 5
Hi!
I'm trying to add an UDP data input, but splunk returns this error:
1. Encountered the following error while trying to save: In handler 'udp': Unable to find pipeline with name udp..
The same error is returned if i try to add a TCP data input.
Help me!
What OS? What port? What user is Splunk running as? Have you enabled lightweight forwarder mode?
I'm getting the same sort of error when enabling the "Receive data from a forwarder" option. When i enter in a port number and select save i get the following error
Encountered the following error while trying to save: In handler 'cooked': Unable to find pipeline with name tcp..
Anyone have any ideas?
Did you enable Light Forwarder mode, possibly by mistake? You will have to disable Light Forwarder and try again.
The same Splunk instance can't be a LWF and a receiver at the same time.
Disable the Light Forwarder via command line:
splunk disable app SplunkLightForwarder
Or modify $SPLUNK_HOME/etc/apps//SplunkLightForwarder/(local|default)/app.conf and set "state = disabled."
Note that even though you received the pipeline error via CLI or web server, your inputs.conf file is still created. But until you disable the Light Forwarder, splunkd won't listen on those ports when you start up.