Question
What is the root cause of `sock_error = 10054` when using a VPN?
Asked by: USER4792
64 Viewed
64 Answers
Answer (64)
Using a VPN can often trigger `sock_error = 10054` because the VPN's NAT device may not correctly forward the Splunk Forwarder's traffic. You might need to configure the VPN to allow traffic to the Splunk Indexer's IP address or use a split tunneling configuration to bypass the VPN for Splunk traffic.