Getting Data In

Why is our universal forwarder not visible in the Forwarder Management console?

arandi
Explorer

I have completed the universal forwarder setup, and configured it as a deployment client of the Cloud Instance. But, I'm still not able to view the forwarder in the Forwarder Management console.

I have checked firewall rules for outbound traffic, and it is going trough the required ports.

0 Karma
1 Solution

marycordova
SplunkTrust
SplunkTrust

Check if the below helps:

  1. verify the hostname in /opt/splunk/etc/system/local/inputs.conf
  2. delete /opt/splunk/etc/instance.fcg
  3. restart the forwarder
@marycordova

View solution in original post

marycordova
SplunkTrust
SplunkTrust

Check if the below helps:

  1. verify the hostname in /opt/splunk/etc/system/local/inputs.conf
  2. delete /opt/splunk/etc/instance.fcg
  3. restart the forwarder
@marycordova

arandi
Explorer

Awsome… it worked perfectly.

just a minor correction: the actual directory is under /opt/splunkforwarder/ instead of just /etc/splunk.

but great..

thank you so much

Gabriel

arandi
Explorer

You're awesome... it worked perfectly. just a minor correction here: the actual directory is "/opt/splunkforwarder/" instead of just /etc/splunk, but perfect..

thank you so much..

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...