UF not sending data to HF on 9997 - Splunk Community

Deployment Architecture

Hi

How should I set TLS settings to compatible with HF or cert for Universal Forwarder to send data to HF because my UF suppose to send data to HF in my environment but I see the below error in splnkd.log

I am getting "ssl3_get_client_hello wrong version number"

This UF server was down for a long time and i renamed it after power-on, so might need a new cert to do a handshake with HF but I am not getting exact steps to follow.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious! We’re back with another ...