Splunk Enterprise

Why is client is not appearing in deployment server for phone home?

NDabhi21
Explorer

Hi Splunk Experts,

I have configured custom application on deployment server, however my linux universal forwarder is not appearing for App client config. 

And also not appearing in forwarder management clients section  .

On Linux Universal Forwarder,  config for the deployment  server and Communication also allowed between UF and DS server. However server is not appearing 

Commands : splunk set deploy-poll 10.1.1.30:8086

                         splunk restart

 

 

Labels (1)
Tags (1)
0 Karma

NDabhi21
Explorer

Hi Matt,

After checking Splunkd logs , communication was allowed and custom app has been installed on the server however server is not reflect in to phonehome

 

0 Karma

matt8679
Path Finder

I would check the server name on the UF and search what you find in the Forwarder Management on the deployment server. It sounds like everything is working.

 

Forwarder management > click on your server class > search the server name found on UF

To get it to show in the monitoring console:

Monitoring console > settings > Forwarder Monitoring Setup > Rebuild Forwarder assets.

Hope this helps.

Matt

0 Karma

matt8679
Path Finder

I would check the splunkd logs on the UF to troubleshoot.

restart the splunk service on the UF and tail the logs.

tail -f /opt/splunkforwarder/var/log/splunk/splunkd.log

 

0 Karma
Get Updates on the Splunk Community!

Platform Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestIntroducing Splunk Edge Processor, simplified data ...

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...