All Apps and Add-ons

Getting SSL errors

idsersupport
Explorer

For some reason I am getting the following two errors showing in my syslog data on my esxi hosts:

SSL Handshake failed for stream TCP(local=esxihost:443, peer=splunk:34717), error=SSL Exception: Unexpected EOF
SSLStreamImpl::DoServerHandshake (680fe048) SSL_accept failed with Unexpected EOF

It is the forwarded appliance trying to connect to the the esxi hosts. Any clue how I can fix this?

cpriester
New Member

Just noticed the same issue on our infrastructure. vmware app 2.0 and vcenter UF 5.0.4. Has there been any resolution to this yet? or is the answer upgrade to vmware app 3.0?

0 Karma

idsersupport
Explorer

It is in issue with the vmware splunk app 2.0. I have been in contact with Splunk about this issue. Not have heard back from them.

0 Karma

kml_uvce
Builder

can you give me your inputs and outputs file of sender(forwarder) and inputs file of receiver(indexer) details ...
-Kamal Bisht

kamal singh bisht
0 Karma

sowings
Splunk Employee
Splunk Employee

The local host is 443, so I really hope it's not the forwarder trying to connect. Typically 443 is going to be a (non-default) setting for the Splunk UI.

0 Karma

mjones414
Contributor

I am getting the same thing across all of my ESXi hosts and from vcenter. 2.0.0 vmware app. 5.0.2 indexer, 5.0.2. vcenter UF

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...