ERROR TcpOutputFd [TcpOutEloop] - Read error. An existing connection was forcibly closed by the remote host.
I have this error on one of our Splunk Windows UF, and I cannot resolve the issue.
our setup is UF>Intermediate HF>HF>Indexer
1. Connection from the UF to the intermediate HF port 9997 is okay, using tnc.
2. tried re installing the UF and restarting the Intermediate HF but still no success.
3. I noticed that from intermediate HF, its only sending SYN_RECV packets to UF.
Please help to check.
balshore
