i'm in doubt, i have installed UF on windows server but when i list forward-server it says that there are no active fordware but is configurated, on port 9997 and also de deploy with 8088. What issue do you think it is? is there a way to active the forwarder?
did you checked if the connection ports are open? you can check them using telnet.
then, you can check in forwarder's logs (
$SPLUNK_HOME/var/log/splunk/) if the connection is established.
At least check if the forwarder is active, you can check the process (
ps -eafd) searching for
If you find that the process is active and ports are open, check if the servername is correct (