topic Re: how to identify the forwarder detail in Getting Data In

how to identify the forwarder detail

krishnarajb2304 — Tue, 04 Nov 2014 07:14:54 GMT

I have 4 Farwarders sending data to indexes how to identify their details while searching

Re: how to identify the forwarder detail

MuS — Tue, 04 Nov 2014 07:19:30 GMT

please clarify/specify what details you mean?

Re: how to identify the forwarder detail

Raghav2384 — Wed, 05 Nov 2014 03:04:19 GMT

Assuming you want to know which data containing host is married to the forwarder,
->Check inputs.conf on the host's SplunkHOME/etc/system/local.
->Check other config files.
->Install S.O.S app and look the topology etc.
Like MuS mentioned, all the answers you get would be darts in the dark until you clarify.

Re: how to identify the forwarder detail

jayannah — Wed, 05 Nov 2014 03:12:18 GMT

Data onboarding app is small one and easy to understand the forwarder details and app is available at https://apps.splunk.com/app/1769/

SoS is vey good app (https://apps.splunk.com/app/748/), but it has lots of information beyond forwarders details and you may have to spend sometime to understand the app.

If you just need forwarders information, use Data onboarding app.

Re: how to identify the forwarder detail

mendesjo — Thu, 30 Jul 2015 21:32:17 GMT

Sorry newbie here.. Previous guy that I took over for installed SOS.. when I run topology report yes I can see my servers and forwarders, but in no way tells me if it's a heavy, lite, or universal forwarder. How do I tell?