So scenario is a vm that can ping another vm.
1st vm is linux rhel : I installed splunk enterprise and made it the deployment server
also yes I enabled receiving on 9997
2nd vm is a win 10 64 bit: Installed universal forwarder and did the customize option and put in IP of linux box for receiver and for deployment server.
when I got to add data I get this error: There are currently no forwarders configured as deployment clients to this instance. Learn More
I tried making the deployment server also be the deployment client but according to my reading you can't do that is this right?
do I need a third box and make it either my deployment server or deployment client?
this should work. I suppose that you have followed these instructions https://docs.splunk.com/Documentation/Splunk/9.0.1/Updating/Planadeployment ?
Have you already added any apps to DS for deployment?
One thing which you should check that there is no host based firewall on those nodes (especially on DS) which prevents the access. You could use just
telnet <ip of ds server> 8089
to check this. If you haven’t telnet on Windows then you could use e.g. powershell to emulate the same functionality. You should look exact command/script from google.
alright get ready so if the IP of my computer is 10.0.2.3
and the nslookup is 10.1.2.19 or something like that which one am I using and the IP for Deployment server
I realize this might be a bad question but thats where I am at.
I know I did one thing right I got the default ports right
this is what I got for forwarder mostly because I was trying all sorts of things to get it to work