Deployment Architecture

DMC vs Deployment server - different number of forwarders

Robbie1194
Communicator

Hi Splunkers,

I have noticed my DMC shows around 1450 forwarders (180 of which are missing) but my Deployment Sever GUI tells me that there are 1500 that have reported in with their normal heartbeat as expected with only 20 or so not having reported in as expected.

Does anyone know why these figures might be different? Or does anyone have any advice on how I can investigate and possibly resolve the issue?

Thanks!

0 Karma
1 Solution

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

View solution in original post

0 Karma

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

0 Karma
Get Updates on the Splunk Community!

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...

New Customer Testimonials

Enterprises of all sizes and across different industries are accelerating cloud adoption by migrating ...