Reporting

How to check if a windows/unix server is reporting to splunk?

bsuresh1
Path Finder

Hi Guys,

I am completely new to Splunk. Finding ways to learn as much quickly. Please help me out.

Question:
How to check if a windows/unix server is reporting to splunk? - I am aware if a Forwarder is installed on client server, then it will contact splunk servers. But I want to make sure if the forwarder is actively communicating with splunk servers? Can we see a list of servers which are reporting to Splunk on a glance?

Tags (2)
0 Karma

Yasaswy
Contributor

Hi,
You should be able to lookup all data received from forwaders by querying the internal index...

index=_internal metrics  group=per_host_thruput earliest=@d

above should give you all data received from hosts for the day. If you are using a deployment sever you can see all the clients phoning in under settings->forwarder management.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...