Connecting to 192.168.110.178
CONNECTED(00000003)
Can't use SSL_get_servername
depth=0 C=US, ST=CA, L=LA, O=Default Company Ltd, CN=indexer.lab
verify return:1
---
Certificate chain
 0 s:C=US, ST=CA, L=LA, O=Default Company Ltd, CN=indexer.lab
   i:C=US, ST=CA, L=LA, O=Default Company Ltd, CN=indexer.lab
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Dec  6 01:47:24 2024 GMT; NotAfter: Dec  6 01:47:24 2027 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIDlzCCAn+gAwIBAgIUWed1CLpSh6oPP9DRERq0B/eOXa8wDQYJKoZIhvcNAQEL
BQAwWzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMQswCQYDVQQHDAJMQTEcMBoG
A1UECgwTRGVmYXVsdCBDb21wYW55IEx0ZDEUMBIGA1UEAwwLaW5kZXhlci5sYWIw
HhcNMjQxMjA2MDE0NzI0WhcNMjcxMjA2MDE0NzI0WjBbMQswCQYDVQQGEwJVUzEL
MAkGA1UECAwCQ0ExCzAJBgNVBAcMAkxBMRwwGgYDVQQKDBNEZWZhdWx0IENvbXBh
bnkgTHRkMRQwEgYDVQQDDAtpbmRleGVyLmxhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONosIB57FwyOHnlUofdrtoyDF4MRrLxhjvTxROSxWoClqXg
9XaQkHnaTIQ4tqfODZiyo53k4dXnktysx+luuduTJkPqNCsu1P+e5r2jAG+LCgn9
yReEpltJhLQQUMpdEVemAXUpbo7eqQDAopwWs19+sKgtuAtfvE1ULUliPWNFxjEx
jRFZAf4u1kEKE3CMn1O0vMH1UJOeuBA4FXNIZF6pEmeOMIvm3macu3xy1SvhfMWs
uxVDRJHPNLWo6aW3ppUw+fpvysblcmFy7d2IsIB56FrQ0FMSbFvdC3Wv03oIYnjL
c9hw7soGMRGt12aSpFEut/7yPsF3DiaLAWVezKMCAwEAAaNTMFEwHQYDVR0OBBYE
FJGHN1McoAINW4YJ73x4919IIIioMB8GA1UdIwQYMBaAFJGHN1McoAINW4YJ73x4
919IIIioMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAAAomU7I
zXnX4N7kVQaQhzYZ4KuzQVARvlKyMqm5BFSXyZcTvDpcHo9ckGStWkTbKAHICHJA
L2yVDIpCSa9qCZqbw8tIalJ+6NlBgVGIm4liWfovfDvjeXAIHsLFmu6iDE9iIM6m
dOu/5uaU8kp8YVVNqe6HJNyJ+ppbgQNvbhxN/+8JgLLzYd6Rmtyyhg0nYRbPAXw0
oXjkDLQhLhDTkTciai3ZyXNMzJ6JHlYrY5RTxNAIDWbHucCOklBanIVxdxWP7lu2
2WsdO2FIr6c/DVO/1mhbNsKNNH2d6vutYIX7bF36L1hmhwMr6OgFi/hSS/2Tliob
atNllV8wPRDUXW8=
-----END CERTIFICATE-----
subject=C=US, ST=CA, L=LA, O=Default Company Ltd, CN=indexer.lab
issuer=C=US, ST=CA, L=LA, O=Default Company Ltd, CN=indexer.lab
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, prime256v1, 256 bits
---
SSL handshake has read 1577 bytes and written 428 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 2E3CF9ECDD7167D5CC268BDE0E7FCA510B45BB30FBE03BE7DE26421E5E3E66BA
    Session-ID-ctx:
    Master-Key: 278F803460AE29C48D122FDA86479359468B6CA78B370E12B1D670F327790FD368A40BC7CF2C385F242306FD878CE39B
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 8b 0b e2 0a 92 51 ad 7d-4c fd e8 7e a8 5b d3 d4   .....Q.}L..~.[..
    0010 - 8e 09 35 54 43 f6 49 ef-82 97 97 83 08 a1 15 f8   ..5TC.I.........
    0020 - 85 78 f5 f4 85 d6 ad 4b-10 9b 1d 0b 03 38 f9 2a   .x.....K.....8.*
    0030 - c5 82 af 2a 8e 24 45 6a-b6 b8 bc 16 19 aa 1a 43   ...*.$Ej.......C
    0040 - 49 4d f5 45 16 78 78 52-e7 ab b5 97 b1 01 c5 36   IM.E.xxR.......6
    0050 - 22 43 df eb 5d 3b a0 70-0f 03 8f bb 1f d7 d7 7f   "C..];.p........
    0060 - ae 4c bf 19 da 5f 23 f1-20 f1 da b3 40 49 e7 9d   .L..._#. ...@I..
    0070 - af 4c 05 dc 9c b4 9d 0f-7c 1e 9b 55 11 40 e3 fd   .L......|..U.@..
    0080 - e4 94 5f af fd 48 90 ea-05 c0 84 a9 60 fa 8a 32   .._..H........2
    0090 - 67 de 5f eb f7 bd 18 dc-8a 6e b1 10 10 9c bb 2a   g._......n.....*

    Start Time: 1733450947
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---

Error from Splunk Universal Forwarder:

-05-2024 18:08:33.554 -0800 INFO  TcpOutputProc [4144 parsing] - _isHttpOutConfigured=NOT_CONFIGURED
12-05-2024 18:08:33.557 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.558 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.560 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.561 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.563 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.563 -0800 WARN  AutoLoadBalancedConnectionStrategy [4145 TcpOutEloop] - Applying quarantine to ip=192.168.110.178 port=9997 connid=2 _numberOfFailures=2
12-05-2024 18:08:33.564 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.564 -0800 WARN  AutoLoadBalancedConnectionStrategy [4145 TcpOutEloop] - Applying quarantine to ip=192.168.110.178 port=9997 connid=0 _numberOfFailures=2
12-05-2024 18:08:33.565 -0800 INFO  WatchedFile [4152 tailreader0] - File too small to check seekcrc, probably truncated.  Will re-read entire file='/opt/splunkforwarder/var/log/splunk/btool.log'.
12-05-2024 18:08:33.566 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.566 -0800 WARN  AutoLoadBalancedConnectionStrategy [4145 TcpOutEloop] - Applying quarantine to ip=192.168.110.178 port=9997 connid=3 _numberOfFailures=2
12-05-2024 18:08:33.567 -0800 ERROR TcpOutputFd [4145 TcpOutEloop] - Read error. Connection reset by peer
12-05-2024 18:08:33.567 -0800 WARN  AutoLoadBalancedConnectionStrategy [4145 TcpOutEloop] - Applying quarantine to ip=192.168.110.178 port=9997 connid=1 _numberOfFailures=2