We need more information.
What version of Splunk is the forwarder? Is it a Universal Forwarder or Heavy Forwarder?
What version of Splunk is the Deployment Server? (FTR, the DS does not push configurations - forwarders pull them from the DS.)
What error messages are in the forwarder's splunkd.log file?
---
If this reply helps you, Karma would be appreciated.
