Getting Data In

How can I find a listing of all universal forwarders that I have in my Splunk environment?

Paramy
Loves-to-Learn Lots

Hello ,

 

Can you help me out How can I find a listing of all universal forwarders that I have in my Splunk environment?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want a list of all UF's you ever installed anywhere regardless of whether they are alive or not, that's impossible of course without a third-party inventory software.

You can get a list of deployment clients using deployment server. But these will only be clients that use said DS to get their apps.

You can use Forwarder Monitoring section in Monitoring Console but this will only populate after some time of your forwarders' activity. (And you have to enable this functionality in MC).

0 Karma

Bhumi
Path Finder

Hi @Paramy 

If you are using deployment server to manage your forwarders, then you can access the forwarder management interface through Splunk Web on the deployment server and view your forwarders which are connected as clients.

You can also check it from the CLI with below command 
splunk list deploy-clients

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...