Hi,
I was wondering is it possible to install Splunk App for Microsoft Exchange on standalone Splunk instance. I have followed the guide. After creating the "sent to indexer" app instance started not to index any data. I have get the below error.
ERROR:
"Tcpout Processor: The TCP output processor has paused the data flow. Forwarding to output group default-autolb-group has been blocked for 10 seconds. This will probably stall the data flow towards indexing and other network outputs. Review the receiving system's health in the Splunk Monitoring Console. It is probably not accepting data"
What could be the possible reason for such an issue? Should I have to deploy this app to indexer?
Best Regards,
↧