https://community.cloudera.com/t5/Archives-of-Support-Questions/getsplunk-processor-fails-on-complex-queries/m-p/177174#M58352 <P>Is it possible that complex splunk queries are too much for the getsplunk processor? These queries are a few hundred lines long, but run fine in the splunk GUI. Error is below, and recommendations on how to troublehshoot?</P><P>10:11:06 ESTERRORf46c3d86-5571-146c-a8ef-071da5f520e6 denatb3wlwbl08.cloud.myco.org:8443GetSplunk[id=f46c3d86-5571-146c-a8ef-071da5f520e6] Failed to process session due to org.apache.nifi.processor.exception.ProcessException: IOException thrown from GetSplunk[id=f46c3d86-5571-146c-a8ef-071da5f520e6]: java.net.SocketException: Connection reset: org.apache.nifi.processor.exception.ProcessException: IOException thrown from GetSplunk[id=f46c3d86-5571-146c-a8ef-071da5f520e6]: java.net.SocketException: Connection reset</P> Fri, 16 Sep 2022 11:21:23 GMT edmund_prout 2022-09-16T11:21:23Z https://community.cloudera.com/t5/Archives-of-Support-Questions/getsplunk-processor-fails-on-complex-queries/m-p/177174#M58352 <P>Is it possible that complex splunk queries are too much for the getsplunk processor? These queries are a few hundred lines long, but run fine in the splunk GUI. Error is below, and recommendations on how to troublehshoot?</P><P>10:11:06 ESTERRORf46c3d86-5571-146c-a8ef-071da5f520e6 denatb3wlwbl08.cloud.myco.org:8443GetSplunk[id=f46c3d86-5571-146c-a8ef-071da5f520e6] Failed to process session due to org.apache.nifi.processor.exception.ProcessException: IOException thrown from GetSplunk[id=f46c3d86-5571-146c-a8ef-071da5f520e6]: java.net.SocketException: Connection reset: org.apache.nifi.processor.exception.ProcessException: IOException thrown from GetSplunk[id=f46c3d86-5571-146c-a8ef-071da5f520e6]: java.net.SocketException: Connection reset</P> Fri, 16 Sep 2022 11:21:23 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/getsplunk-processor-fails-on-complex-queries/m-p/177174#M58352 edmund_prout 2022-09-16T11:21:23Z https://community.cloudera.com/t5/Archives-of-Support-Questions/getsplunk-processor-fails-on-complex-queries/m-p/177175#M58353 <P>Answering my own question. This was happening because of the load balancer between Nifi and splunk. Hitting splunk directly resolved the issue.</P> Wed, 29 Mar 2017 00:55:10 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/getsplunk-processor-fails-on-complex-queries/m-p/177175#M58353 edmund_prout 2017-03-29T00:55:10Z