Getting Data In

Is there an easy way to export to csv a list of all my forwarder clients from my deployment server?

bcusick
Communicator

Hi,

Is there an easy way of exporting a list of all my forwarder clients from my deployment server to csv? I just need a list of them without having to search for them via active data in Splunk.

Thanks!
B

rwright6
Engager

Try this:

| rest /services/deployment/server/clients | table hostname

jlemoine
Path Finder

This one works for me. Have to add the " | table hostname "

0 Karma

marcoscala
Builder

adding "|table hostname" prevent the browser to hang because there are maybe too many columns.
Thanks!

0 Karma

aaronkorn
Splunk Employee
Splunk Employee

On the DS you should be able to run | rest /services/deployment/server/clients to generate a base search to cleanup/filter then export.

tmeader
Contributor

This returns nothing on my deployment server, despite having ~126 clients. Any ideas? I really could use something like this though, as the immutability of the built in "Forwarder management" dashboard makes it essentially useless.

Thanks.

mandrewjeski
Explorer

ditto, doesn't work

0 Karma

ddrillic
Ultra Champion

Works for me when running it on the UI of the deployment server.

0 Karma

shawngarrettsgp
Path Finder

| rest /services/deployment/server/clients | table hostname,ip

Referencing from here
http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTdeploy

0 Karma

mikkorh
Explorer

Reviving this from the dead in case someone else suffers from the "no results":

| rest splunk_server=local /services/deployment/server/clients | table hostname,ip

mendesjo
Path Finder

same here.. nothing.. another query that doesn't work.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...