Reporting

connectivity between forwarder and deployment server

anoopambli
Communicator

Is there any CLI option in unversal forwarder to check if it is establishing connection with deployment server?

We are using HPOO automation tool to install splunk forwarder on windows and linux servers, last step of installation copies deploymentclient.conf file to %SPLUNK_HOME%\etc\system\local directory. Wanted to know if there is any command available to make sure that it can connect to deployment server.

Tags (1)
0 Karma

Drainy
Champion

There are a whole host of commands available which you can use on the UF or deployment server, have a look at;
http://docs.splunk.com/Documentation/Splunk/latest/Admin/CLIadmincommands

You can also have a look through splunkd.log to see for connections or app downloads.

DaveSavage
Builder

You may consider looking at the other end, albeit this doesn't strictly address your request - but to check the visibility of the host at the indexer confirms the forwarder is working AND gives you opportunity to check the data stream plus the rate of indexing. All that completes the job, as opposed to checking at the send end ?
If you have network access you would also see the traffic - worthwhile in case sure, it's sending but with no result i.e. you have firewall issues.

Drainy
Champion

My only comment on this is that it is the UF that initiates the connection when it phones home so in this case it is sometimes easier to quickly check on the UF that it is trying to connect

Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...