Getting Data In

How can I find a listing of all universal forwarders that I have in my Splunk environment?

Paramy
Loves-to-Learn Lots

Hello ,

 

Can you help me out How can I find a listing of all universal forwarders that I have in my Splunk environment?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want a list of all UF's you ever installed anywhere regardless of whether they are alive or not, that's impossible of course without a third-party inventory software.

You can get a list of deployment clients using deployment server. But these will only be clients that use said DS to get their apps.

You can use Forwarder Monitoring section in Monitoring Console but this will only populate after some time of your forwarders' activity. (And you have to enable this functionality in MC).

0 Karma

Bhumi
Path Finder

Hi @Paramy 

If you are using deployment server to manage your forwarders, then you can access the forwarder management interface through Splunk Web on the deployment server and view your forwarders which are connected as clients.

You can also check it from the CLI with below command 
splunk list deploy-clients

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...