topic How do I verify the forwarder is sending data to the indexer? in Monitoring Splunk https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/630975#M9329 <P>How do i verify the forwarder is sending data to the Indexer? What search do i need to perform other then Forwarder Management?</P> Thu, 16 Feb 2023 17:04:01 GMT rodneymitch80 2023-02-16T17:04:01Z How do I verify the forwarder is sending data to the indexer? https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/630975#M9329 <P>How do i verify the forwarder is sending data to the Indexer? What search do i need to perform other then Forwarder Management?</P> Thu, 16 Feb 2023 17:04:01 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/630975#M9329 rodneymitch80 2023-02-16T17:04:01Z Re: Forwarder verification https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/630983#M9331 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/248337">@rodneymitch80</a>&nbsp;,</P><P>at first you can run a simple search like this:</P><LI-CODE lang="markup">index=_internal host=&lt;your_host&gt;</LI-CODE><P>to be sure that the UF is connected and configured.</P><P>then running this search:</P><LI-CODE lang="markup">index=* host=&lt;your_host&gt;</LI-CODE><P>you can verify if the predefined inputs are correctly running.</P><P>Ciao.</P><P>Giuseppe</P> Wed, 15 Feb 2023 15:02:09 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/630983#M9331 gcusello 2023-02-15T15:02:09Z Re: Forwarder verification https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/631203#M9333 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp;Thank you for knowledge and expertise. I'm a newbie with Splunk so i'm just trying to start somewhere and build from there.&nbsp;</P> Thu, 16 Feb 2023 14:30:49 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/631203#M9333 rodneymitch80 2023-02-16T14:30:49Z Re: Forwarder verification https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/631204#M9334 <P>HI&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/248337">@rodneymitch80</a>,</P><P>if one answer solves your need, please accept one answer for the other people of Community or tell me how I can help you.</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Thu, 16 Feb 2023 14:47:44 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/631204#M9334 gcusello 2023-02-16T14:47:44Z Re: Forwarder verification https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/631214#M9335 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/248337">@rodneymitch80</a>,</P><P>good for you, see next time!</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Thu, 16 Feb 2023 16:14:40 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-I-verify-the-forwarder-is-sending-data-to-the-indexer/m-p/631214#M9335 gcusello 2023-02-16T16:14:40Z