Splunk Enterprise

lot of ERROR messages on HF

xori
Loves-to-Learn

Hi, 

my env is like - UF->HF->IDX Cluster

I have many errors on my HF that it can't received the data

some are like:
"ERROR TcpInputProc - Message rejected. Received unexpected message of size=369295616 bytes from src=xxxx:xxxx in streaming mode. Maximum message size allowed=67108864. (::) Possible invalid source sending data to splunktcp port or valid source sending unsupported payload."

 

and some are like
"ERROR TcpInputProc - Encountered Streaming S2S error = Received reference to unknown channel_code=1 for data received from src=xxx:xxx"

 

any help?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...