https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/183000#M36670 <P>Can't you simply check the index for recent data?</P> Wed, 11 Mar 2015 12:21:29 GMT jeffland 2015-03-11T12:21:29Z https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/182999#M36669 <P>I want to check if forwarder is forwarding the latest data to indexer.</P> Wed, 11 Mar 2015 12:20:23 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/182999#M36669 shariinPH 2015-03-11T12:20:23Z https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/183000#M36670 <P>Can't you simply check the index for recent data?</P> Wed, 11 Mar 2015 12:21:29 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/183000#M36670 jeffland 2015-03-11T12:21:29Z https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/183001#M36671 <P>got it! tnx</P> Wed, 11 Mar 2015 12:29:37 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/183001#M36671 shariinPH 2015-03-11T12:29:37Z https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/183002#M36672 <P>If you know your forwarders are checking in, then you can simply run a search... with an eye on timestamps.</P> <P>First, check to see that your specific forwarders are checking in using the monitoring console (MC).</P> <P>Second, search for specific data using the Searching and Reporting app.</P> Sun, 05 Mar 2017 23:12:11 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-check-if-forwarder-is-forwarding-data/m-p/183002#M36672 markakirkland 2017-03-05T23:12:11Z