Skip to main content
Question

Any suggestions for a destination facing severe issues: Write ECONNRESET error

  • March 11, 2025
  • 7 replies
  • 59 views
S

Destination is presently experiencing severe problems. Below are details -error is Write ECONNRESETany suggestion how to fix this ?the same destination is receiving another log stream very well

    7 replies

    X
    Forum|alt.badge.img
    • xpac xpac
    • Participating Frequently
    • March 11, 2025

    Look at the IDX, it should tell you why it's resetting the connection

    S
    • saurabh.gupta
    • Author
    • Known Participant
    • March 11, 2025

    i changed the max s2s version from v4 to v3 as wellstill the same issue

    S
    • saurabh.gupta
    • Author
    • Known Participant
    • March 11, 2025

    splunk internal logs error --- error 140760FC:SSL routines: SSL23_GET_CLIENT_HELLO:unknown protocol

    X
    Forum|alt.badge.img
    • xpac xpac
    • Participating Frequently
    • March 11, 2025

    One side is configured to use TLS, the other is not

    X
    Forum|alt.badge.img
    • xpac xpac
    • Participating Frequently
    • March 11, 2025

    My guess is Cribl is not, but Splunk expects TLS

    S
    • saurabh.gupta
    • Author
    • Known Participant
    • March 11, 2025

    Yup. Client hello handshake issue

    S
    • saurabh.gupta
    • Author
    • Known Participant
    • March 11, 2025

    I encrypted my outward stream. works like charm

    Terms & ConditionsAccessibility statement