Deployment Architecture

DMC vs Deployment server - different number of forwarders

Robbie1194
Communicator

Hi Splunkers,

I have noticed my DMC shows around 1450 forwarders (180 of which are missing) but my Deployment Sever GUI tells me that there are 1500 that have reported in with their normal heartbeat as expected with only 20 or so not having reported in as expected.

Does anyone know why these figures might be different? Or does anyone have any advice on how I can investigate and possibly resolve the issue?

Thanks!

0 Karma
1 Solution

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

View solution in original post

0 Karma

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...