Have you both rekeyed the device and written out cluster settings following the upgrade? These steps are commonly missed but are necessary in each SIEM 11 upgrade to ensure connectivity is fully functioning.
Assuming that's been done then this is not expected behaviour and I recommend raising a service request so you can send Support the logs from your receivers - we'll need to see what command is being run on the systems so we can understand why they are failing and help resolve it.
Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?