topic Upgraded forwarder from version 5.0.3 to 6.0.5 - Read error. Connection reset by peer in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Upgraded-forwarder-from-version-5-0-3-to-6-0-5-Read-error/m-p/129006#M26486 <PRE><CODE>07-02-2014 20:37:57.663 +0000 ERROR TcpOutputFd - Read error. Connection reset by peer </CODE></PRE> <P>Just upgraded a forwarder from version 5.0.3 to 6.0.5</P> <P>Was working before, no changes to any configs in local directories. </P> <P>btool check, no configs are wrong.</P> Wed, 02 Jul 2014 20:41:35 GMT ben_leung 2014-07-02T20:41:35Z Upgraded forwarder from version 5.0.3 to 6.0.5 - Read error. Connection reset by peer https://community.splunk.com/t5/Getting-Data-In/Upgraded-forwarder-from-version-5-0-3-to-6-0-5-Read-error/m-p/129006#M26486 <PRE><CODE>07-02-2014 20:37:57.663 +0000 ERROR TcpOutputFd - Read error. Connection reset by peer </CODE></PRE> <P>Just upgraded a forwarder from version 5.0.3 to 6.0.5</P> <P>Was working before, no changes to any configs in local directories. </P> <P>btool check, no configs are wrong.</P> Wed, 02 Jul 2014 20:41:35 GMT https://community.splunk.com/t5/Getting-Data-In/Upgraded-forwarder-from-version-5-0-3-to-6-0-5-Read-error/m-p/129006#M26486 ben_leung 2014-07-02T20:41:35Z Re: Upgraded forwarder from version 5.0.3 to 6.0.5 - Read error. Connection reset by peer https://community.splunk.com/t5/Getting-Data-In/Upgraded-forwarder-from-version-5-0-3-to-6-0-5-Read-error/m-p/129007#M26487 <P>My fault, I renamed the splunkforwarder directory and forgot to change it in the outputs.conf for the certPath.</P> Wed, 02 Jul 2014 20:49:35 GMT https://community.splunk.com/t5/Getting-Data-In/Upgraded-forwarder-from-version-5-0-3-to-6-0-5-Read-error/m-p/129007#M26487 ben_leung 2014-07-02T20:49:35Z