configuring td-agent to connect to splunk_hec over SSL

[jackpas23]

Hello, I am currently having issues trying to get td-agent to work over SSL when connecting to Splunk. When we disable "SSL required on Splunk side", and operate on http, the td-agent works perfectly and is able to send over log data. Here is my source and match information and curious as to why it does not work. I have seen some forums mention changing the type forward match block but am unsure. As you can see also, I have tried various parameter blocks but nothing has seemed to work so far.

"source"
@type forward
@id input_forward
"source"

"source"
@type http
@id input_http
port 8888
"source"

<match vault_audit.**>
@type splunk_hec
host #######################
port 8088
token #####################
index vault-audit
#insecure_ssl false
#scheme https
ca_file #########.crt
#ssl_verify_peer true
#ssl_verify_depth 5
#ssl_version TLSv1_2
#sourcetype json
#message_key message
#tag_key tag
"match"

I also get this error whenever I restart td-agent on the server.

[warn]: #0 failed to flush the buffer. retry_time=1 next_retry_seconds=2023-02-28 13:37:06 -0700 chunk="5f5c88eddcacb645f2911ed7fbfb8d23" error_class=HTTPClient::KeepAliveDisconnected error="HTTPClient::KeepAliveDisconnected: Connection reset by peer"

[jackpas23]

Also, how can I fix this issue?

"buffer tag"
flush_mode interval
retry_type exponential_backoff
"buffer"
"match" is not used.