I'm having a problem with a windows Universal Forwarder.
After successfully connecting the forwarder to the deployment server, the app the with files outputs.conf and server.conf is downloaded but no logs are received on the indexer cluster.
From splunkd.log on universal forwarder I see this error:
06-10-2021 17:58:19.885 +0200 ERROR SSLCommon - Can't read certificate file %programfiles%\SplunkUniversalForwarder\etc\auth\xxxxr.pem errno=33558531 error:02001003:system library:fopen:No such process06-10-2021 17:58:19.885 +0200 ERROR TcpOutputProc - Error initializing SSL context - check splunkd.log regarding configuration error for server indexer:9997
Do you have any idea?