Why SSL status show as "false" despite configuring SSL. In Our environment we have enabled TLS configuration between forwarders and receivers. The connection is established and we could see data is coming through secure TLS channel into splunk.
I have validated manually as well using openssl client module and verification was successful with status ok.
We could see for the hosts, SSL as false and it keeps changing at random times to True or False. And connection type is cookedSSL for the False host.
I have checked all the tcpoutputproc and tcpinputproc in splunkd logs, cannot find any errors related to SSL.
But found below WARN messages on one of the forwarders. Is this causing the problem ?
Any leads on this.
