on HF had to uninstall requests and reinstall it to get a new version to get rid of the error about the certs import error
ImportError: cannot import name certs
pip list | grep requests
yum list installed | grep requests
sudo pip uninstall requests
sudo pip uninstall urllib3
sudo yum install python-urllib3
sudo yum install python-requests
pip install boto3

yum list installed | grep ssl_match
ssl_match_hostname is not getting picked up my requests and crashing the HF returner to splunk
next step deploy to all minions and see if HF is unquie or not. 
***ERROR: python import requests ***

salt salt* pillar.item splunk_http_forwarder


index=salt | spath fun | search fun="grains.items"

salt saf*local state.sls salt_minion.salt_minion_configs
network.connect iratemoses.mdr.defpoint.com 8088
cmd.run 'tail -50 /var/log/salt/minion'
pillar.item splunk_http_forwarder

moose-splunk-indexer-3 | 10.80.103.198 | vpc-0b676c4efd7fad548

not working 
ip-10-81-9-10.msoc.defpoint.local   | customer-portal   | vpc-0f45bf3132d4e25f3 | subnet-0de23b03ea0a6bf1d
ip-10-81-8-205.msoc.defpoint.local  | customer-portal   | vpc-0f45bf3132d4e25f3 | subnet-0c173d841b5b59a24
Connection timed out need to update terraform git PR submitted waiting on review/approval

----
saf-splunk-ds-1 10.1.10.161                     |  ddps01.corp.smartandfinal.com
saf-splunk-syslog-1 10.1.10.163                 |  ddps03.corp.smartandfinal.com 
saf-splunk-syslog-2 10.1.10.164                 |  ddps04.corp.smartandfinal.com
saf-splunk-dcn-1 10.1.10.162                    |  ddps02.corp.smartandfinal.com
ERRORs:
ConnectionError: ('Connection aborted.', error(104, 'Connection reset by peer'))


Name mismatch
afssplds100.us.accenturefederal.com     | afs-splunk-ds-2
afssplds102.us.accenturefederal.com     | ...
afssplhf101.us.accenturefederal.com
afssplhf102.us.accenturefederal.com
afssplhf103.us.accenturefederal.com
afssplhf104.us.accenturefederal.com

aws-splnks1-tts.nga.gov
aws-syslog1-tts.nga.gov
aws-syslog2-tts.nga.gov



[prod]brad_poulton@salt-master:~:$ salt '*' network.get_hostname
moose-splunk-indexer-2.msoc.defpoint.local:
    moose-splunk-indexer-2.msoc.defpoint.local
saf-splunk-indexer-3.msoc.defpoint.local:
    saf-splunk-indexer-3.msoc.defpoint.local
afs-splunk-indexer-1.msoc.defpoint.local:
    afs-splunk-indexer-1.msoc.defpoint.local
phantom.msoc.defpoint.local:
    phantom.msoc.defpoint.local
moose-splunk-hf.msoc.defpoint.local:
    moose-splunk-hf.msoc.defpoint.local
nga-splunk-sh.msoc.defpoint.local:
    nga-splunk-sh.msoc.defpoint.local
saf-splunk-cm.msoc.defpoint.local:
    saf-splunk-cm.msoc.defpoint.local
openvpn.msoc.defpoint.local:
    openvpn.msoc.defpoint.local
ip-10-81-8-205.msoc.defpoint.local:
    ip-10-81-8-205.msoc.defpoint.local
afs-splunk-indexer-2.msoc.defpoint.local:
    afs-splunk-indexer-2.msoc.defpoint.local
saf-splunk-indexer-2.msoc.defpoint.local:
    saf-splunk-indexer-2.msoc.defpoint.local
moose-splunk-indexer-3.msoc.defpoint.local:
    moose-splunk-indexer-3.msoc.defpoint.local
reposerver.msoc.defpoint.local:
    reposerver.msoc.defpoint.local
nga-splunk-indexer-2.msoc.defpoint.local:
    nga-splunk-indexer-2.msoc.defpoint.local
afs-splunk-hf.msoc.defpoint.local:
    afs-splunk-hf.msoc.defpoint.local
nga-splunk-indexer-3.msoc.defpoint.local:
    nga-splunk-indexer-3.msoc.defpoint.local
afs-splunk-syslog-2:
    afssplhf104.us.accenturefederal.com
moose-splunk-indexer-1.msoc.defpoint.local:
    moose-splunk-indexer-1.msoc.defpoint.local
moose-splunk-sh.msoc.defpoint.local:
    moose-splunk-sh.msoc.defpoint.local
sensu.msoc.defpoint.local:
    sensu.msoc.defpoint.local
moose-splunk-cm.msoc.defpoint.local:
    moose-splunk-cm.msoc.defpoint.local
saf-splunk-indexer-1.msoc.defpoint.local:
    saf-splunk-indexer-1.msoc.defpoint.local
ip-10-81-9-10.msoc.defpoint.local:
    ip-10-81-9-10.msoc.defpoint.local
afs-splunk-sh.msoc.defpoint.local:
    afs-splunk-sh.msoc.defpoint.local
nga-splunk-indexer-1.msoc.defpoint.local:
    nga-splunk-indexer-1.msoc.defpoint.local
clu.msoc.defpoint.local:
    clu.msoc.defpoint.local
dps-idm-1.msoc.defpoint.local:
    dps-idm-1.msoc.defpoint.local
vault-3.msoc.defpoint.local:
    vault-3.msoc.defpoint.local
nga-splunk-cm.msoc.defpoint.local:
    nga-splunk-cm.msoc.defpoint.local
afs-splunk-ds-1:
    afssplds102.us.accenturefederal.com
afs-splunk-syslog-1:
    afssplhf103.us.accenturefederal.com
afs-splunk-syslog-3:
    afssplhf101.us.accenturefederal.com
bastion.msoc.defpoint.local:
    bastion.msoc.defpoint.local
saf-splunk-dcn-1:
    ddps02.corp.smartandfinal.com
saf-splunk-sh.msoc.defpoint.local:
    saf-splunk-sh.msoc.defpoint.local
saf-splunk-hf.msoc.defpoint.local:
    saf-splunk-hf.msoc.defpoint.local
salt-master.msoc.defpoint.local:
    salt-master.msoc.defpoint.local
splunk-mc.msoc.defpoint.local:
    splunk-mc.msoc.defpoint.local
nga-splunk-hf.msoc.defpoint.local:
    nga-splunk-hf.msoc.defpoint.local
jira-server.msoc.defpoint.local:
    jira-server.msoc.defpoint.local
mailrelay.msoc.defpoint.local:
    mailrelay.msoc.defpoint.local
proxy.msoc.defpoint.local:
    proxy.msoc.defpoint.local
afs-splunk-syslog-4:
    afssplhf102.us.accenturefederal.com
nga-splunk-syslog-1:
    aws-syslog1-tts.nga.gov
vault-1.msoc.defpoint.local:
    vault-1.msoc.defpoint.local
saf-splunk-syslog-2:
    ddps04.corp.smartandfinal.com
afs-splunk-ds-2:
    afssplds100.us.accenturefederal.com
afs-splunk-cm.msoc.defpoint.local:
    afs-splunk-cm.msoc.defpoint.local
afs-splunk-indexer-3.msoc.defpoint.local:
    afs-splunk-indexer-3.msoc.defpoint.local
nga-splunk-ds-1:
    aws-splnks1-tts.nga.gov
nga-splunk-syslog-2:
    aws-syslog2-tts.nga.gov
vault-2.msoc.defpoint.local:
    vault-2.msoc.defpoint.local
saf-splunk-syslog-1:
    ddps03.corp.smartandfinal.com
saf-splunk-ds-1:
    ddps01.corp.smartandfinal.com