How to know all integrated forwarders within the environment?

[aasserhifni]

I see different forwarders count using the following different ways:

1. Looking at the forwarder management at the license master
2. Looking at the Forwarders:Deployment at the license master
3. Looking at  dmc_forwarder_assets.csv inside /opt/splunk/etc/apps/splunk_monitoring_console/lookups/  at the license master

So, which one should I guarantee and is there any better way?

[deepakc]

From the MC run the below - it should give you a starting point

index=_internal source=*metrics.log group=tcpin_connections fwdType=uf hostname=* | eval hostname=lower(hostname)  
| fields _time hostname sourceIp arch destPort fwdType os ssl version
| table _time hostname sourceIp arch destPort fwdType os ssl version
|  dedup hostname