Getting Data In

How can I find a listing of all universal forwarders that I have in my Splunk environment?

Paramy
Loves-to-Learn Lots

Hello ,

 

Can you help me out How can I find a listing of all universal forwarders that I have in my Splunk environment?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want a list of all UF's you ever installed anywhere regardless of whether they are alive or not, that's impossible of course without a third-party inventory software.

You can get a list of deployment clients using deployment server. But these will only be clients that use said DS to get their apps.

You can use Forwarder Monitoring section in Monitoring Console but this will only populate after some time of your forwarders' activity. (And you have to enable this functionality in MC).

0 Karma

Bhumi
Path Finder

Hi @Paramy 

If you are using deployment server to manage your forwarders, then you can access the forwarder management interface through Splunk Web on the deployment server and view your forwarders which are connected as clients.

You can also check it from the CLI with below command 
splunk list deploy-clients

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...