Getting Data In

How can I find a listing of all universal forwarders that I have in my Splunk environment?

Paramy
Loves-to-Learn

Hello ,

 

Can you help me out How can I find a listing of all universal forwarders that I have in my Splunk environment?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want a list of all UF's you ever installed anywhere regardless of whether they are alive or not, that's impossible of course without a third-party inventory software.

You can get a list of deployment clients using deployment server. But these will only be clients that use said DS to get their apps.

You can use Forwarder Monitoring section in Monitoring Console but this will only populate after some time of your forwarders' activity. (And you have to enable this functionality in MC).

0 Karma

Bhumi
Explorer

Hi @Paramy 

If you are using deployment server to manage your forwarders, then you can access the forwarder management interface through Splunk Web on the deployment server and view your forwarders which are connected as clients.

You can also check it from the CLI with below command 
splunk list deploy-clients

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...