https://community.splunk.com/t5/Getting-Data-In/Can-t-feed-data-into-Splunk/m-p/480833#M82437 <P>Run this command to check if the forwarder is connected to the receiving instance.<BR /> "splunk list forward-server" , the indexer's ip should be in active state.</P> <P>If its active , the next things to do is to check the splunkd.log of the universal forwarder.</P> Thu, 09 Jan 2020 03:35:19 GMT mloyola_splunk 2020-01-09T03:35:19Z https://community.splunk.com/t5/Getting-Data-In/Can-t-feed-data-into-Splunk/m-p/480831#M82435 <P>I'm trying to know why I can't feed data in splunk. I'm trying to get data from windows servers to splunk, I've created a UF on the Windows server that has the data that needs to be forwarded to splunk. I've configured inputs and outputs.conf files on the forwarder and have also configured inputs.com file on the indexer, all ports are opened, everything is set but I'm still not getting data in splunk. Any help?</P> Wed, 08 Jan 2020 21:03:04 GMT https://community.splunk.com/t5/Getting-Data-In/Can-t-feed-data-into-Splunk/m-p/480831#M82435 essibong1 2020-01-08T21:03:04Z https://community.splunk.com/t5/Getting-Data-In/Can-t-feed-data-into-Splunk/m-p/480832#M82436 <P>Have you verified the forwarder can connect to the indexer?</P> Wed, 08 Jan 2020 23:17:38 GMT https://community.splunk.com/t5/Getting-Data-In/Can-t-feed-data-into-Splunk/m-p/480832#M82436 richgalloway 2020-01-08T23:17:38Z https://community.splunk.com/t5/Getting-Data-In/Can-t-feed-data-into-Splunk/m-p/480833#M82437 <P>Run this command to check if the forwarder is connected to the receiving instance.<BR /> "splunk list forward-server" , the indexer's ip should be in active state.</P> <P>If its active , the next things to do is to check the splunkd.log of the universal forwarder.</P> Thu, 09 Jan 2020 03:35:19 GMT https://community.splunk.com/t5/Getting-Data-In/Can-t-feed-data-into-Splunk/m-p/480833#M82437 mloyola_splunk 2020-01-09T03:35:19Z