Hi All,
I have this issue that device is not logging to splunk. When I checked the splunkd.log I have found this error.
Note I change the URL and server name already for security purposes
02-18-2020 10:19:52.849 +1000 ERROR TcpOutputFd - Connection to host=172.x.x.x:9997 failed
02-18-2020 10:21:22.458 +1000 ERROR X509 - X509 certificate (CN=BXXXXX,OU=X ,O=X,L=X,ST=X C=X) alternate name (BX,BX.bxxy.net) did not match any allowed names (BZ)
Do you have any idea what this error means? It seems to me that the heavy forwarder of the device does not match the name of the one allowed on the indexer
Thanks,
