Active forwards: 10.20.30.40:9997 Configured but inactive forwards: None

[rahul2gupta]

Hi,

When I ran the command ./splunk list forward-server , we are getting below error message.

Active forwards:
10.20.30.40:9997
Configured but inactive forwards:
None

Can you please help me to troubleshoot the below error?

Regards,

Rahul Gupta

[isoutamo]

What is your error? This said that you have configured one forwarder which are currently in use?

[rahul2gupta]

Hi @isoutamo ,

logs are not getting ingested into splunk.

Regards,

Rahul

[isoutamo]

Is that a correct address for your indexer?

Did you see internal logs from that forwarder or other FWDs?