Regarding my Universal forwarder down intimation

[zahab20]

Dear Team,

This is to inform you that i have around 50 universal forwarder installed in my splunk environment.

How we can be aware that one of Universal forwarder has stopped sending the data to indexer?

Please help.

Regards,

Zahab Zia

[zahab20]

Can you please mention the path ?

[inventsekar]

[richgalloway]

The Monitoring Console has a built-in alert for missing forwarders.