Getting Data In

How can I find a listing of all universal forwarders that I have in my Splunk environment?

Paramy
Loves-to-Learn Lots

Hello ,

 

Can you help me out How can I find a listing of all universal forwarders that I have in my Splunk environment?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want a list of all UF's you ever installed anywhere regardless of whether they are alive or not, that's impossible of course without a third-party inventory software.

You can get a list of deployment clients using deployment server. But these will only be clients that use said DS to get their apps.

You can use Forwarder Monitoring section in Monitoring Console but this will only populate after some time of your forwarders' activity. (And you have to enable this functionality in MC).

0 Karma

Bhumi
Path Finder

Hi @Paramy 

If you are using deployment server to manage your forwarders, then you can access the forwarder management interface through Splunk Web on the deployment server and view your forwarders which are connected as clients.

You can also check it from the CLI with below command 
splunk list deploy-clients

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...