Getting Data In

dmc_forwarder_asset not displaying Universal Forwarders

naqviah
Explorer

Is there a reason why "dmc_forwarder_assets" is not displaying the universal forwarders in DMC ? It was displaying it before but now it is not.

  • Thanks
0 Karma

woodcock
Esteemed Legend

At a point when all forwarders are reporting, rerun this:
Settings -> Monitoring Console -> Settings -> Forwarder Monitoring Setup -> Rebuild forwarder assets

0 Karma

woodcock
Esteemed Legend

Someone could have rerun the setup within a timeframe where the forwarders were not reporting.

0 Karma

naqviah
Explorer

What would be the best way to resolve this issue?

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...