https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9442#M19 <P>How do I get rid of this error message -- for now at least? (I've filed a bug on this, since ERROR message should only be result of an error condition.)</P> Sat, 23 Jan 2010 04:11:53 GMT V_at_Splunk 2010-01-23T04:11:53Z https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9440#M17 <P>I have a lot of these ERROR messages in the splunkd.log on my indexing instance, what is it trying to tell me?</P> <P>A snippet of the log says - </P> <PRE><CODE>01-22-2010 15:21:24.544 ERROR TcpInputFd - SSL Error = error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request 01-22-2010 15:21:24.544 ERROR TcpInputFd - ACCEPT_RESULT=-1 VERIFY_RESULT=0 01-22-2010 15:21:24.544 ERROR TcpInputFd - SSL Error for fd from HOST:&lt;hostName&gt;, IP:&lt;Ip_Address&gt;, PORT:&lt;port#&gt; </CODE></PRE> Sat, 23 Jan 2010 02:37:32 GMT https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9440#M17 Mick 2010-01-23T02:37:32Z https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9441#M18 <P>You will see this error if SSL is enabled on the indexer but not configured to forward w/ssl attempting to make the connections.</P> <P>To enable SSL forwarding please see this document for details. <A href="http://www.splunk.com/base/Documentation/4.0.8/Admin/UseSSLencryptionbetweenforwardersandreceivers" rel="nofollow">http://www.splunk.com/base/Documentation/4.0.8/Admin/UseSSLencryptionbetweenforwardersandreceivers</A></P> Sat, 23 Jan 2010 03:52:20 GMT https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9441#M18 Chris_R_ 2010-01-23T03:52:20Z https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9442#M19 <P>How do I get rid of this error message -- for now at least? (I've filed a bug on this, since ERROR message should only be result of an error condition.)</P> Sat, 23 Jan 2010 04:11:53 GMT https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9442#M19 V_at_Splunk 2010-01-23T04:11:53Z https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9443#M20 <P>I have no SSL forwarding or receiving setup and I'm still seeing similar error messages.</P> Wed, 14 Apr 2010 05:10:41 GMT https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9443#M20 Lowell 2010-04-14T05:10:41Z https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9444#M21 <P>Retina Scan... That's what's causing mine. Check any vulnerability scan times against the error time.</P> Fri, 03 May 2013 17:13:39 GMT https://community.splunk.com/t5/Security/ERROR-TcpInputFd-SSL-Error-what-does-it-mean/m-p/9444#M21 Strype 2013-05-03T17:13:39Z