Getting Data In

Why am I getting error "HttpPubSubConnection - Received message for an unsubscribed channel: ..." on my universal forwarder?

Path Finder


I am getting the following error in Splunk on a Windows Universal Forwarder:

HttpPubSubConnection - Received message for an unsubscribed channel: deploymentServer/phoneHome/default/reply/servername/1DC3F94E-3967-4C5D-B212-EB35B8E26E32

What does that mean? How do I troubleshoot this issue.

Please provide your opinions on this matter.

0 Karma


HI, Splunk - troubleshoot remote
agents with the phonehome logs

SEE THIS it may help you.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture


Maximize the Value from Microsoft Defender with Splunk


This Week's Community Digest - Splunk Community Happenings [6.27.22]
