Getting Data In

Some forwarders as displayed in forwarder management have a blank Instance Name? How to fix?

radam2000
Path Finder

Some forwarders as displayed in forwarder management have a blank Instance Name? How to fix?
we have 268 forwarders clients installed and about 8 have no Instance Name displayed?

Also - what is the query to display the forwarders with the instance name as i can''t actually export the list with instance name
I have successfully exported from the monitoring console forwarder management queries but none of these display instance name. I tried to add the field in the query but it doesn't seem to exist

Tags (1)
0 Karma
1 Solution

dkeck
Influencer

If it helped please accept this answer 🙂 thank you

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...