Getting Data In

How do I get hosts (universal forwarders) show on the Splunk Light home page?

bmalone
New Member

I have Splunk Light installed and set up on my server. I have the receiving port set. On the client I want Splunk Light to monitor, I have installed the Universal Forwarder and pointed it to the Splunk Light server and port. On the Splunk light server I have added the forwarder, but on the Splunk Light home page, under the Hosts column, the client computer is not getting listed. What am I missing?

0 Karma

jterry
Splunk Employee
Splunk Employee

i think the hosts listing on the home page derives it's values from the data that's been ingested, namely the "host=" field. If no data has been sent by the forwarder(s) in question, then it/they will not appear in the listing. Additionally, if a forwarder is sending data but that data already has a "host" field in it, that value may preclude the forwarders inclusion in the list. If a global search "*" returns data/events then look at the hosts value attached to them. Those values should be listed on the home page.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...