Getting Data In

I installed 10 forwarders, but why do I only see the first 5 hosts I created in Splunk Web?

bento_prod
Explorer

I am trying to set up our Splunk Cloud Light.
I installed 10 forwarders on our different services.

The problem is that when to go the "Add Data" window to start creating data sources, I see only the first 5 hosts I created.

Where I can find the all the hosts?

gneumann_splunk
Splunk Employee
Splunk Employee

In your Splunk Light instance, open the sidebar menu and look under System > Forwarder monitoring and/or System > Forwarder Management. The Forwarder Monitoring dashboard displays a list of the total count of forwarders you have configured, with a status for each forwarder. The Forwarder Management dashboard lists universal forwarders configured as deployment clients.

Note, it might take a few minutes for all of your forwarders to display as they need to load as Splunk Light cloud service updates.

See http://docs.splunk.com/Documentation/SplunkLight/6.4.3/Cloud/ForwarddatatoSplunkLightcloudservice for detailed information about adding universal forwarders and getting data into Splunk Light cloud service.

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...