How to Know Which Forwarders Are Actively Forwarding Data to My Splunk Server

[skoelpin]

Where in Splunk can I find which forwarders are actively forwarding data to my Splunk server? I'm on the Splunk server and checked my inputs.conf and that didn't have much info.

[aljohnson_splun · Accepted solution]

http://answers.splunk.com/answers/73908/listing-forwarders.html

http://answers.splunk.com/answers/173520/what-search-query-can-i-use-on-my-search-head-to-l.html

http://answers.splunk.com/answers/154096/list-host-source-by-forwarder.html

[skoelpin]

Exactly what I needed, thanks

[changux]

The Splunk On Splunk app has a lot of saved searches with useful data about the topology, do you tried?

[skoelpin]

Well this is where it gets tricky.. We have 3 different instances on the Splunk UI with massive amounts of data in it. Each instance has different servers forwarding data to it and I would prefer to go to my Splunk server and get a high level overview of everything being forwarded