How can I tell which servers in my enterprise are forwarding to the master server. We do automated installs of vm's and splunk is automated to install and start but I would like to have a picture or list from within the app to show that I am receiving data from the servers after installation.
Thanks Mark
one way is to run the following search to give an idea of which hosts are fowarding how many events
* | chart count(host) by host
Run this over the last 15 minutes.
Both solutions work.. Thanks to both.
one way is to run the following search to give an idea of which hosts are fowarding how many events
* | chart count(host) by host
Run this over the last 15 minutes.
Both solutions work, thanks very much has made my manual process automated.
Solution is what I was looking for.