Is there any CLI option in unversal forwarder to check if it is establishing connection with deployment server?
We are using HPOO automation tool to install splunk forwarder on windows and linux servers, last step of installation copies deploymentclient.conf file to %SPLUNK_HOME%\etc\system\local directory. Wanted to know if there is any command available to make sure that it can connect to deployment server.
There are a whole host of commands available which you can use on the UF or deployment server, have a look at;
http://docs.splunk.com/Documentation/Splunk/latest/Admin/CLIadmincommands
You can also have a look through splunkd.log to see for connections or app downloads.
You may consider looking at the other end, albeit this doesn't strictly address your request - but to check the visibility of the host at the indexer confirms the forwarder is working AND gives you opportunity to check the data stream plus the rate of indexing. All that completes the job, as opposed to checking at the send end ?
If you have network access you would also see the traffic - worthwhile in case sure, it's sending but with no result i.e. you have firewall issues.
My only comment on this is that it is the UF that initiates the connection when it phones home so in this case it is sometimes easier to quickly check on the UF that it is trying to connect