At first glance it looks relatively OK. You have your inputs matching your outputs. Check your splunkd.log on the sending UF and the receiving HF. There should be hints as to the reason for lack of connectivity. If nothing else helps - try to tcpdump the traffic and see what's going on there. EDIT: OK, your initial post says that you get "Connection reset by peer" but it's a bit unclear which side this is from. ... View more