Getting Data In

How do I check the individual file monitoring status on a Forwarder?

brew169
New Member

A few months ago I was setting up a Windows Forwarder machine to monitor some directories on other Windows machines via CIFS. I think I used a web browser pointed at port 8089, and was able to get a long webpage showing the monitoring status of each and every file the Windows Forwarder was monitoring. It was very helpful to let me get the Forwarder box working properly.

Now I'm adding some more Windows machines and trying to set up another box (I need another box because it's on a different Windows AD domain) but I can't seem to get the File Status Monitoring webpage like I had before. I can't even bring up the file monitoring webpage on the existing Forwarder, even though it's definitely still harvesting data from those CIFS files successfully.

The url was something like:

http://splunk-fwd:8089/some/path/info/

... but it doesn't return any data or even give me the log in window.

Could somebody refresh my memory and point out the simple mistake I'm probably making? I searched the splunkbase for the string I used, but can now longer locate it.

Thanks....

brew

0 Karma

bosburn_splunk
Splunk Employee
Splunk Employee

brew169
New Member

Ah... success.

That was it. https://

I'd left off the secure part and, of course, got no data back from the server. And then I had to actually have the rest of the url. I had a feeling (was hoping) that it was something simple I'd overlooked.

Hooray..... thanks guys.

brew

0 Karma

BobM
Builder

All calls to splunkd should be HTTPS. Corrected

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...