All Apps and Add-ons

If two different versions of Splunk are used, will it affect my service from sending incoming data to each server?

ichesla1111
Path Finder

Splunk versions being used:
Splunk Server 1 = Version 8.2.7
Splunk Server 2 = Version 8.1.1

Background:
I created a service which monitors different folders for incoming data. When a user places new data into one of the folders, Splunk SPL creates a tailored message for the Virtual Machine (VM) to move the data. If message is received by VM, the VM sends the data through a TCP port to another service which verifies the data. If verified, the data will go straight to the Splunk servers via TCP/IP.

Issue
When I updated one of the servers, my whole data transfer process described above stopped working. My services cannot communicate with the VM anymore.

Error Generated in Splunk Logs:
1. "It seems the Splunk default certificates are being used. If certificate validation is turned on using the default certificated (not recommended), results in loss of communication in mixed-version Splunk upgrades."

2.  "Splunk's properly implemented crypto code resulted in the ciphertext being rejected instead of decrypted when AAD validation failed."

Summary of Question:
Since two different versions of Splunk are running, is it affecting the Splunk SPL ability to send a message to the VM/why my VM is not communicating/working anymore?

Thank you.

0 Karma

woodcock
Esteemed Legend

Open a support case.

ichesla1111
Path Finder

Okay, thank you!!!

0 Karma

ichesla1111
Path Finder

Update on Error: My TCP is unable to connect to the other computer

"Error TcpOutFd - Connection to host failed, host refused it.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...