topic SPL-74902 and SPL-76208, do I have to upgrade Indexer, Forwarder or both? in Knowledge Management https://community.splunk.com/t5/Knowledge-Management/SPL-74902-and-SPL-76208-do-I-have-to-upgrade-Indexer-Forwarder/m-p/114675#M7417 <P>Description: "In environments with malware and end-point scanning activities occurring, some network events can cause Splunk to generate TcpChannel - Error trying to begin socket accept: An invalid argument was supplied. messages in splunkd.log. (SPL-74902, SPL-76208)"</P> <P>This is fixed in 6.0.1, but it is not clear for me if I have to upgrade the indexer, the forwarder, or both?</P> <P>The question of "indexer, forwarder or both" applies to everything in the release notes, but it is this specific issue that interests me right now.</P> Wed, 15 Jan 2014 09:48:52 GMT anderius 2014-01-15T09:48:52Z SPL-74902 and SPL-76208, do I have to upgrade Indexer, Forwarder or both? https://community.splunk.com/t5/Knowledge-Management/SPL-74902-and-SPL-76208-do-I-have-to-upgrade-Indexer-Forwarder/m-p/114675#M7417 <P>Description: "In environments with malware and end-point scanning activities occurring, some network events can cause Splunk to generate TcpChannel - Error trying to begin socket accept: An invalid argument was supplied. messages in splunkd.log. (SPL-74902, SPL-76208)"</P> <P>This is fixed in 6.0.1, but it is not clear for me if I have to upgrade the indexer, the forwarder, or both?</P> <P>The question of "indexer, forwarder or both" applies to everything in the release notes, but it is this specific issue that interests me right now.</P> Wed, 15 Jan 2014 09:48:52 GMT https://community.splunk.com/t5/Knowledge-Management/SPL-74902-and-SPL-76208-do-I-have-to-upgrade-Indexer-Forwarder/m-p/114675#M7417 anderius 2014-01-15T09:48:52Z Re: SPL-74902 and SPL-76208, do I have to upgrade Indexer, Forwarder or both? https://community.splunk.com/t5/Knowledge-Management/SPL-74902-and-SPL-76208-do-I-have-to-upgrade-Indexer-Forwarder/m-p/114676#M7418 <P>I did encounter the problem again after upgrading only the server, so I guess the answer is yes. It would be nice to have information like this from a more official source, though...</P> Wed, 19 Feb 2014 14:00:09 GMT https://community.splunk.com/t5/Knowledge-Management/SPL-74902-and-SPL-76208-do-I-have-to-upgrade-Indexer-Forwarder/m-p/114676#M7418 anderspdmt 2014-02-19T14:00:09Z