Deployment Architecture

DMC vs Deployment server - different number of forwarders

Robbie1194
Communicator

Hi Splunkers,

I have noticed my DMC shows around 1450 forwarders (180 of which are missing) but my Deployment Sever GUI tells me that there are 1500 that have reported in with their normal heartbeat as expected with only 20 or so not having reported in as expected.

Does anyone know why these figures might be different? Or does anyone have any advice on how I can investigate and possibly resolve the issue?

Thanks!

0 Karma
1 Solution

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

View solution in original post

0 Karma

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...