I installed one splunk trial version and two universal forwarders on different servers. they all worked normally at the beginning. The splunk server could get the data from the two forwarders. But one month later, the splunk server can get only one forwarder data. And the status of splunk server and two forwarders are normal. Currently the splunk version is free. so my question is how many forwarders does the splunk free version support? only one ? If not , what should i do to fix the problem so that i can get both forwarders data? Thank you in advance.
There is no limit stated by Splunk on the number for forwarders used with Free Splunk. So, I'll say you can go ahead and use as my UFs you want to use. It is only about the license usage which should remain within 500 MB and ofcourse it would be a 30 day trial period.