Deployment Architecture

Deployment monitor not showing accurate information on forwarders

remy06
Contributor

I've just upgrade a splunk server from 4.1.7 to 4.2.1.

After the upgrade,I enabled the deployment monitor and noticed that it prompts me about a number of missing forwarders.

the last connected time shown for those forwarders is the time I performed the upgrade.

However I did a search to check but those forwarders are actually active and is sending data.

0 Karma
1 Solution

Archana
Splunk Employee
Splunk Employee

Did the missing forwarders warning disappear after 24 hours? I can believe that you got the warning since we use a different definition to uniquely identify forwarders in the 4.2.1 version. Let us know if the warning persists past 24 hours (that's how far back the data is searched to look for missing forwarders).

View solution in original post

0 Karma

Archana
Splunk Employee
Splunk Employee

Did the missing forwarders warning disappear after 24 hours? I can believe that you got the warning since we use a different definition to uniquely identify forwarders in the 4.2.1 version. Let us know if the warning persists past 24 hours (that's how far back the data is searched to look for missing forwarders).

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...