I used to clear all missing FWs in the Splunk Ent. using the MC "Rebuild" option. But it is not working anymore. Any helpful advice is much appreciated.
Please elaborate on "did not help" and "is not working anymore". What results do you get and what did you expect?
Please understand the "Rebuild Forwarder Assets" button does not fix anything. It essentially tells the MC to forget forwarders it hasn't seen in a while so they're no longer "missing". The forwarders are still gone, they're just not reported. The true fix is to restart the forwarder.
Thank u for your message. I appreciate it as always. What I mean it the "rebuild forwarder assets" option did not reduce the number of missing FWs even by changing the duration. It stayed about 17. Usually this option would bring the number of the missing FWs down to 1 or 2. Thank u sir.