I am in the process of planning an upgrade from 6.5.2 to 7.0.1 and am looking at the Windows-specific changes listed here: http://docs.splunk.com/Documentation/Splunk/7.0.1/Installation/AboutupgradingREADTHISFIRST. It says that the TLS and SSL cipher suites that come with version 7.0 do not support Windows Server 2008 R2 by default. My question would be is this affected by the server upgrade or the forwarder upgrade? So if we upgrade our servers to 7.0.1 but retain our forwarders at a previous 6.x release would forwarding over TLS/SSL still work for Windows Server 2008R2 or are the changes needed for the Splunk server configurations?
