Universal Forwarder on Windows: Errors with Splunk Indexer (SSL).

tjmrider — Sun, 07 Jun 2020 01:21:32 GMT

So I have a Universal forwarder installed on a Windows system (v7.3.3) and I have it set up to communicate with my Splunk Enterprise server (v. 7.3.4). The Windows system has checked into Splunk, when I look at the Web GUI (Settings > Forwarder Management). I think that my problem has to do with SSL, but I am not sure how or where to change this setting in order to make it work. The errors that I am getting are:

ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:55681. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:55682. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:53711. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:53712. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

Any help would be greatly appreciated. I am new to Splunk!

Re: Universal Forwarder on Windows: Errors with Splunk Indexer (SSL).

richgalloway — Wed, 27 May 2020 16:59:12 GMT

You have two very different problems. Please post a new question about the "permission denied" problem.

Re: Universal Forwarder on Windows: Errors with Splunk Indexer (SSL).

tjmrider — Wed, 27 May 2020 17:04:32 GMT

I removed that from the post. I believe that I know what that is from

topic Re: Universal Forwarder on Windows: Errors with Splunk Indexer (SSL). in Getting Data In

Universal Forwarder on Windows: Errors with Splunk Indexer (SSL).

Re: Universal Forwarder on Windows: Errors with Splunk Indexer (SSL).

Re: Universal Forwarder on Windows: Errors with Splunk Indexer (SSL).