Another update on this issue. In the web_service.log, we see this error when attempting to do the export: 2026-08-17 12:14:38,088 ERROR [6a82fb2e0416a3ee756d0] __init__:874 - SSL error communicating with splunkd, error="[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1046)", path=/servicesNS/admin/search/search/v2/jobs/1786967914.3/events/export?output_mode=csv&f=_raw&f=_time&f=eventtype&f=exception&f=host&f=index&f=linecount&f=logger&f=message&f=punct&f=severity&f=source&f=sourcetype&f=splunk_server&f=splunk_server_group&f=tag&f=tag%3A%3Aeventtype&f=thread&output_time_format=%25Y-%25m-%25dT%25H%3A%25M%3A%25S.%25Q%25z 2026-08-17 12:14:38,088 ERROR [6a82fb2e0416a3ee756d0] decorators:413 - Splunkd daemon is not responding: ('SSL error communicating with splunkd, error="[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1046)", path=/servicesNS/admin/search/search/v2/jobs/1786967914.3/events/export?output_mode=csv&f=_raw&f=_time&f=eventtype&f=exception&f=host&f=index&f=linecount&f=logger&f=message&f=punct&f=severity&f=source&f=sourcetype&f=splunk_server&f=splunk_server_group&f=tag&f=tag%3A%3Aeventtype&f=thread&output_time_format=%25Y-%25m-%25dT%25H%3A%25M%3A%25S.%25Q%25z',) Traceback (most recent call last): File "F:\Program Files\Splunk\Python-3.13\Lib\site-packages\splunk\rest\__init__.py", line 856, in streamingRequest conn.connect() ~~~~~~~~~~~~^^ Looking at that __init__.py python file, just before it calls the conn.connect(), it sets the “conn” object in an if statement. The “else” of the if statement is: "conn = httplib.HTTPSConnection(host, port, timeout=timeout, context=ctx)" which seems to be missing the “if isssl else httplib.HTTPConnection(host, port, timeout=timeout)” statement which is present in the line in the first half of the “if” statement where it’s setting the conn. To us, this looks like a bug in this file, in that it is attempting an HTTPS connection regardless of whether ssl is on when it goes in to the “else” condition. If we add that missing bit of code to the line so make it setup an HTTP connection if “isssl” is false, then it seems to work. Addition in bold red below: if getWebKeyFile() and getWebCertFile() and not is_cert_or_key_encrypted(getWebKeyFile()): # load the web private key only if it's cleartext # TODO: add sslPassword decryption logic to load the encrypted web key conn = httplib.HTTPSConnection(host, port, getWebKeyFile(), getWebCertFile(), timeout=timeout, context=ctx) if isssl else httplib.HTTPConnection(host, port, timeout=timeout) else: conn = httplib.HTTPSConnection(host, port, timeout=timeout, context=ctx) if isssl else httplib.HTTPConnection(host, port, timeout=timeout) Can someone confirm this, and a fix be made to Splunk Enterprise if necessary please.
... View more
