https://community.splunk.com/t5/Getting-Data-In/About-version-difference-between-UF-and-SH/m-p/390782#M69893 <P>With Version 6.6.0 they made fixes on the ssl handling. You have to tweak the settings on the UF so that it uses an "insecure" Version of SSL/TLS. <BR /> Another possibility is to upgrade the IDX to at least 6.6. </P> Tue, 19 Feb 2019 15:27:17 GMT markusspitzli 2019-02-19T15:27:17Z https://community.splunk.com/t5/Getting-Data-In/About-version-difference-between-UF-and-SH/m-p/390781#M69892 <P>I saw it.<BR /> <A href="https://docs.splunk.com/Documentation/Forwarder/7.2.4/Forwarder/Compatibilitybetweenforwardersandindexers">https://docs.splunk.com/Documentation/Forwarder/7.2.4/Forwarder/Compatibilitybetweenforwardersandindexers</A></P> <P>I am using IDX of 6.4 and UF of 7.2.<BR /> However, I can not communicate from client hello to x.</P> <HR /> <H2>An S in a cell indicates that this version of forwarder can send data to this version of indexer after you change the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) version and cipher suite on the forwarder. See Known Issues in the Splunk Enterprise Release Notes for instructions on changing the SSL/TLS version and cipher suite. </H2> <P>I do not understand what settings I should add to UF.<BR /> Please teach me</P> Tue, 19 Feb 2019 08:26:08 GMT https://community.splunk.com/t5/Getting-Data-In/About-version-difference-between-UF-and-SH/m-p/390781#M69892 oda 2019-02-19T08:26:08Z https://community.splunk.com/t5/Getting-Data-In/About-version-difference-between-UF-and-SH/m-p/390782#M69893 <P>With Version 6.6.0 they made fixes on the ssl handling. You have to tweak the settings on the UF so that it uses an "insecure" Version of SSL/TLS. <BR /> Another possibility is to upgrade the IDX to at least 6.6. </P> Tue, 19 Feb 2019 15:27:17 GMT https://community.splunk.com/t5/Getting-Data-In/About-version-difference-between-UF-and-SH/m-p/390782#M69893 markusspitzli 2019-02-19T15:27:17Z