https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282670#M54036 <P>Awesome! Glad you are up and working!</P> <P>Could you share what you did to resolve the issue so that future readers can benefit?</P> Fri, 16 Dec 2016 18:46:44 GMT mattymo 2016-12-16T18:46:44Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282666#M54032 <P>i am getting 2 different errors on my Splunk server - please see attached for errors, unsure what is wrong</P> <P>thanks for all your help</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2248i4D49CA0482577F89/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 15 Dec 2016 19:46:08 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282666#M54032 rsingh 2016-12-15T19:46:08Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282667#M54033 <P>Hi rsingh!</P> <P>The tcpInputProc error about unknown protocol is usually due to the forwarder using a version of ssl that the indexer restricts..</P> <P>Check the server.conf as per this doc:</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/6.5.1/Security/SetyourSSLversion">https://docs.splunk.com/Documentation/Splunk/6.5.1/Security/SetyourSSLversion</A></P> <P>Or ensure the certs being used are ok.</P> <P>You can ensure your UF uses the right ssl version with sslVersions in outputs.conf</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/6.5.1/Admin/Outputsconf">https://docs.splunk.com/Documentation/Splunk/6.5.1/Admin/Outputsconf</A></P> <P>Your second error is simply search activity that contains the string error in it. You can filter that put by only searching source=*splunkd.log</P> Thu, 15 Dec 2016 20:22:48 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282667#M54033 mattymo 2016-12-15T20:22:48Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282668#M54034 <P>thanks mmodestino - i think i resolved the previous errors but now i am getting a new one</P> <P>ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-perfmon.exe"" splunk-perfmon - OutputHandler::composeOutput: Counter is not found: Page Faults/sec</P> Thu, 15 Dec 2016 21:13:34 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282668#M54034 rsingh 2016-12-15T21:13:34Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282669#M54035 <P>thanks i fixed it</P> Fri, 16 Dec 2016 16:35:29 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282669#M54035 rsingh 2016-12-16T16:35:29Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282670#M54036 <P>Awesome! Glad you are up and working!</P> <P>Could you share what you did to resolve the issue so that future readers can benefit?</P> Fri, 16 Dec 2016 18:46:44 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282670#M54036 mattymo 2016-12-16T18:46:44Z https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282671#M54037 <P>makes sure - i was able to click on the error itself and it showed me which server was having the error. looks like the server had an old output.conf splunk server</P> <P>thanks again</P> Mon, 19 Dec 2016 13:11:27 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-error-quot-ERROR-TcpInputProc-Error-encountered/m-p/282671#M54037 rsingh 2016-12-19T13:11:27Z