https://community.splunk.com/t5/Deployment-Architecture/Deployment-Monitor-best-practices/m-p/53961#M22299 <P>I'm getting some weird behavior with the Deployment monitor app. I've got two servers in our DMZ that act receive data from forwarders at another data center.</P> <P>When I look at the "All Forwarders" tab, it shows one of the DMZ hosts twice, but not the other one. When I do a check from the command line from a host in the remote data center, it shows that forwarding is working properly.</P> <P>So, my question is, why is one host showing up twice and not the other? I've confirmed that they have different hostnames defined in inputs.conf and server.conf. The other question is, do I need to run the Deployment Monitor on all forwarders? If not, then why can I only see the two forwarders that are forwarding directly to the central server and not any of the 3rd tier servers?</P> <P>Thx.</P> <P>Craig</P> Wed, 18 Jan 2012 23:40:36 GMT mundus 2012-01-18T23:40:36Z https://community.splunk.com/t5/Deployment-Architecture/Deployment-Monitor-best-practices/m-p/53961#M22299 <P>I'm getting some weird behavior with the Deployment monitor app. I've got two servers in our DMZ that act receive data from forwarders at another data center.</P> <P>When I look at the "All Forwarders" tab, it shows one of the DMZ hosts twice, but not the other one. When I do a check from the command line from a host in the remote data center, it shows that forwarding is working properly.</P> <P>So, my question is, why is one host showing up twice and not the other? I've confirmed that they have different hostnames defined in inputs.conf and server.conf. The other question is, do I need to run the Deployment Monitor on all forwarders? If not, then why can I only see the two forwarders that are forwarding directly to the central server and not any of the 3rd tier servers?</P> <P>Thx.</P> <P>Craig</P> Wed, 18 Jan 2012 23:40:36 GMT https://community.splunk.com/t5/Deployment-Architecture/Deployment-Monitor-best-practices/m-p/53961#M22299 mundus 2012-01-18T23:40:36Z https://community.splunk.com/t5/Deployment-Architecture/Deployment-Monitor-best-practices/m-p/53962#M22300 <P>This is pretty strange behavior, and I don't think I can diagnose it without taking a look at your enviroment. Can you please open a support case?</P> Fri, 03 Feb 2012 23:26:31 GMT https://community.splunk.com/t5/Deployment-Architecture/Deployment-Monitor-best-practices/m-p/53962#M22300 araitz 2012-02-03T23:26:31Z