https://community.splunk.com/t5/Getting-Data-In/SSL-Error-in-Splunk-indexer/m-p/331175#M61347 <P>The cyphers changed on splunk 6.6.0, the clarifications are here : <BR /> see <A href="http://docs.splunk.com/Documentation/Splunk/6.6.3/ReleaseNotes/Knownissues">http://docs.splunk.com/Documentation/Splunk/6.6.3/ReleaseNotes/Knownissues</A></P> <P>Options :</P> <UL> <LI>Upgrade the forwarders to 6.6.* and check again.</LI> <LI>or change the cypher conditions on the indexer, see link above. </LI> </UL> Thu, 05 Oct 2017 20:36:57 GMT yannK 2017-10-05T20:36:57Z https://community.splunk.com/t5/Getting-Data-In/SSL-Error-in-Splunk-indexer/m-p/331174#M61346 <P>Hi,</P> <P>Recently we upgraded Splunk indexer from the version 6.5.2 to 6.6.3. Now we have many SSL errors are there in logs. what are these errors ? Because of these error's any impact on Splunk performance ?</P> <P>09-12-2017 02:07:33.824 +0100 WARN SSLCommon - Received fatal SSL3 alert. ssl_state='SSLv3 read client hello C', alert_description='handshake failure'.<BR /> 09-12-2017 02:07:33.824 +0100 WARN HttpListener - Socket error from "IP Address" while idling: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher </P> Tue, 29 Sep 2020 15:43:36 GMT https://community.splunk.com/t5/Getting-Data-In/SSL-Error-in-Splunk-indexer/m-p/331174#M61346 RAYUDU_NARA 2020-09-29T15:43:36Z https://community.splunk.com/t5/Getting-Data-In/SSL-Error-in-Splunk-indexer/m-p/331175#M61347 <P>The cyphers changed on splunk 6.6.0, the clarifications are here : <BR /> see <A href="http://docs.splunk.com/Documentation/Splunk/6.6.3/ReleaseNotes/Knownissues">http://docs.splunk.com/Documentation/Splunk/6.6.3/ReleaseNotes/Knownissues</A></P> <P>Options :</P> <UL> <LI>Upgrade the forwarders to 6.6.* and check again.</LI> <LI>or change the cypher conditions on the indexer, see link above. </LI> </UL> Thu, 05 Oct 2017 20:36:57 GMT https://community.splunk.com/t5/Getting-Data-In/SSL-Error-in-Splunk-indexer/m-p/331175#M61347 yannK 2017-10-05T20:36:57Z