Increased HEC Issues after upgrade from Splunk 7.1...

wasylym · ‎01-13-2020

Our team has recently upgraded from Splunk 7.1.5 to 8.0.1 and found that we are now seeing an increased # of HEC issues following the upgrade.

Has anyone else experienced this issue?

Any ideas / thoughts on a fix?

richgalloway · ‎01-13-2020

Please be more specific. What issues are you seeing?

---
If this reply helps you, Karma would be appreciated.

wasylym · ‎01-13-2020

We started to see the following error appear:

ERROR TcpInputProc - Encountered Streaming S2S error=Received reference to unknown channel_code

Increased HEC Issues after upgrade from Splunk 7.1.5 to 8.0.1

upgrade

Dashboards: Hiding charts while search is being executed and other uses for tokens

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

Are you a member of the Splunk Community?

Increased HEC Issues after upgrade from Splunk 7.1.5 to 8.0.1

upgrade

Dashboards: Hiding charts while search is being executed and other uses for tokens

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

Brains, Bytes, and Boston: Learn from the Best at .conf25