So I have a Universal forwarder installed on a Windows system (v7.3.3) and I have it set up to communicate with my Splunk Enterprise server (v. 7.3.4). The Windows system has checked into Splunk, when I look at the Web GUI (Settings > Forwarder Management). I think that my problem has to do with SSL, but I am not sure how or where to change this setting in order to make it work. The errors that I am getting are:
ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:55681. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:55682. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:53711. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
ERROR TcpInputProc - Error encountered for connection from src=x.x.x.x:53712. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
And also these errors:
ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh" /bin/sh: /opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh: Permission denied
ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh" /bin/sh: /opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh: Permission denied
ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh" /bin/sh: /opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh: Permission denied
ERROR ExecProcessor - message from "/opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh" /bin/sh: /opt/splunk/etc/apps/Splunk_TA_nix/bin/rlog.sh: Permission denied
Any help would be greatly appreciated. I am new to Splunk!
↧