Increased HEC Issues after upgrade from Splunk 7.1...

wasylym · ‎01-13-2020

Our team has recently upgraded from Splunk 7.1.5 to 8.0.1 and found that we are now seeing an increased # of HEC issues following the upgrade.

Has anyone else experienced this issue?

Any ideas / thoughts on a fix?

richgalloway · ‎01-13-2020

Please be more specific. What issues are you seeing?

---
If this reply helps you, Karma would be appreciated.

wasylym · ‎01-13-2020

We started to see the following error appear:

ERROR TcpInputProc - Encountered Streaming S2S error=Received reference to unknown channel_code

Increased HEC Issues after upgrade from Splunk 7.1.5 to 8.0.1

upgrade

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

Join the Conversation

Increased HEC Issues after upgrade from Splunk 7.1.5 to 8.0.1

upgrade

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey