topic Re: Request for Support: Forwarder Management Not Working After Upgrade to Splunk 9.4.0 in Splunk Enterprise

Request for Support: Forwarder Management Not Working After Upgrade to Splunk 9.4.0

Fa1 — Tue, 22 Jul 2025 23:30:09 GMT

Dears,
Hope you are doing well,

I would like to request your assistance regarding an issue we've encountered after upgrading Splunk Enterprise from version 9.1.5 to 9.4.0. Since the upgrade, the Forwarder Management (Deployment Server) functionality is no longer working as expected.

Despite multiple troubleshooting attempts, the issue persists. I have attached a screenshot showing the specific error encountered.

I would greatly appreciate your guidance or recommendations to help resolve this matter. Please let me know if any additional logs or configuration details are needed.

Thank you in advance for your support.

Re: Request for Support: Forwarder Management Not Working After Upgrade to Splunk 9.4.0

PrewinThomas — Wed, 23 Jul 2025 04:12:17 GMT

@Fa1
Seems like this is a known issue with 9.4.0. Please check below for the workaround,

#https://splunk.my.site.com/customer/s/article/After-upgrading-Splunk-from-v9-2-to-v9-4-the-Forwarder-Manager-Web-UI-is-unavailable?_gl=1*3l6qbm*_gcl_au*MTQ5NDE2MzMwOS4xNzUzMTgyNTIy*FPAU*MTQ5NDE2MzMwOS4xNzUzMTgyNTIy*_ga*NDgxNjQ3NjgzLjE3NTMxODI1MjQ.*_ga_5EPM2P39FV*czE3NTMyNDIyOTYkbzIkZzEkdDE3NTMyNDM2NDUkajYwJGwwJGgxODI0MDkyMzEw*_fplc*a0xmeG4lMkZmU25MTkZtN0E1Mk9kdFlKVUNROVFjQzhEQ1F4a1B1OTI1eTQlMkJSdGpSeU1FS0o3aGxBR1N3aUhxUEVzWkRvYkpDZHliWnF1Q1N2WmZLMlNjVUIlMkZjTEVYQlNLbmwwRUplSkhWWm1DWEpUVUJqYngwMGs4ZVhMSkNRJTNEJTNE

Original post#https://community.splunk.com/t5/Splunk-Enterprise/Forwarder-Management-UI-error-on-new-install-9-4-0/m-p/710504

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

Re: Request for Support: Forwarder Management Not Working After Upgrade to Splunk 9.4.0

livehybrid — Wed, 23 Jul 2025 06:52:22 GMT

Hi @Fa1

Are you able to either post your serverclass.conf, or double check it to ensure no syntax errors within it?

You could also try running a btool to check it:

$SPLUNK_HOME/bin/splunk cmd btool serverclass list --debug

If this doesnt highlight any issues then it would be worth investigating a known issue at https://splunk.my.site.com/customer/s/article/After-upgrading-Splunk-from-v9-2-to-v9-4-the-Forwarder-Manager-Web-UI-is-unavailable which looks to be caused by a bad /etc/hosts file - The resolution of this issue is to edit the /etc/hosts file and use the correct format and entries, ensure it starts:

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: Request for Support: Forwarder Management Not Working After Upgrade to Splunk 9.4.0

user12214 — Fri, 02 Jan 2026 08:53:21 GMT

for me it still not worked event after making sure the /etc/hosts file. i also double check my serverclass.conf and no syntax problem

Re: Request for Support: Forwarder Management Not Working After Upgrade to Splunk 9.4.0

isoutamo — Fri, 02 Jan 2026 16:52:34 GMT

Have you used btool to check it? It could be defined in several apps + system/local and without btool it's almost impossible to see what you really have.