Removing uninstalled UF hosts

[timtekk]

Hello, we are on Splunk 9.3 on prem. I am unable to remove a server from the Splunk forwarder management list, after it has been decommissioned and the Universal Forwarder is uninstalled. 

I get an error stating that the DELETE option is depreciated, but what has it been replaced with? I have a server that has not logged to Splunk in 9 days (and never will again), how do I remove it correctly? 

(screenshot attached)

[timtekk]

Thank you @gcusello I'll get with support!

[gcusello]

Hi @timtekk ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

[gcusello]

Hi @timtekk ,

good for you, see next time!

let me know if I can help you more, or, please, accept one answer for the other people of Community.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

[gcusello]

Hi @timtekk ,

are you speaking of removal from the Forwarders list in Deployment Server or Monitoring Console?

if Monitoring Console, you have only to rebuild the Forwarders List [Settings > Monitoring Console > Settings > Forwarder Monitoring Setip].

If from Deployment Server list, you can remove it from web interface [Settings > Forwarder Management > Clients].

Ciao.

Giuseppe

[timtekk]

I am referring to the Deployment Server list. 

When I go to [Settings > Forwarder Management > Clients] and click DELETE RECORD on a client - it says this option has been deprecated. I can still click delete, but the client never goes aways.

See my attached screenshot. 

[gcusello · Accepted solution]

Hi @timtekk ,

it's very strange because in this documentation https://docs.splunk.com/Documentation/Splunk/9.3.1/Updating/Useforwardermanagementtomanageclients#Vi...(latest version), this feature is still present.

But many people in Community reported the same issu: https://community.splunk.com/t5/Deployment-Architecture/Unable-to-remove-records-from-the-Deployment...

Open a case to Splunk Support, because there's a behavior different than documentation.

Ciao.

Giuseppe