https://community.splunk.com/t5/Getting-Data-In/Splunk-not-receiving-any-data-from-splunk-forwarders-after/m-p/382121#M68895 <P>HI,<BR /> Splunk not taking any data from the forwarders after the reboot of client servers. How to get that data back to the splunk?<BR /> What are the actions should we take from next time to prevent this in future? </P> Fri, 04 May 2018 03:40:33 GMT prathapkcsc 2018-05-04T03:40:33Z https://community.splunk.com/t5/Getting-Data-In/Splunk-not-receiving-any-data-from-splunk-forwarders-after/m-p/382121#M68895 <P>HI,<BR /> Splunk not taking any data from the forwarders after the reboot of client servers. How to get that data back to the splunk?<BR /> What are the actions should we take from next time to prevent this in future? </P> Fri, 04 May 2018 03:40:33 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-not-receiving-any-data-from-splunk-forwarders-after/m-p/382121#M68895 prathapkcsc 2018-05-04T03:40:33Z https://community.splunk.com/t5/Getting-Data-In/Splunk-not-receiving-any-data-from-splunk-forwarders-after/m-p/382122#M68896 <P>This shouldn't happen. However, your question is rather generic.</P> <P>Check <CODE>| index=_internal ERROR</CODE> to see if you get any errors in the logs, also take a look into <CODE>var/log/splunk/splunkd.log</CODE> on those forwarders. </P> Fri, 04 May 2018 05:05:06 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-not-receiving-any-data-from-splunk-forwarders-after/m-p/382122#M68896 xpac 2018-05-04T05:05:06Z