Reporting

connectivity between forwarder and deployment server

anoopambli
Communicator

Is there any CLI option in unversal forwarder to check if it is establishing connection with deployment server?

We are using HPOO automation tool to install splunk forwarder on windows and linux servers, last step of installation copies deploymentclient.conf file to %SPLUNK_HOME%\etc\system\local directory. Wanted to know if there is any command available to make sure that it can connect to deployment server.

Tags (1)
0 Karma

Drainy
Champion

There are a whole host of commands available which you can use on the UF or deployment server, have a look at;
http://docs.splunk.com/Documentation/Splunk/latest/Admin/CLIadmincommands

You can also have a look through splunkd.log to see for connections or app downloads.

DaveSavage
Builder

You may consider looking at the other end, albeit this doesn't strictly address your request - but to check the visibility of the host at the indexer confirms the forwarder is working AND gives you opportunity to check the data stream plus the rate of indexing. All that completes the job, as opposed to checking at the send end ?
If you have network access you would also see the traffic - worthwhile in case sure, it's sending but with no result i.e. you have firewall issues.

Drainy
Champion

My only comment on this is that it is the UF that initiates the connection when it phones home so in this case it is sometimes easier to quickly check on the UF that it is trying to connect

Get Updates on the Splunk Community!

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...

Stay Connected: Your Guide to October Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...