Splunk Enterprise

Why is client is not appearing in deployment server for phone home?

NDabhi21
Explorer

Hi Splunk Experts,

I have configured custom application on deployment server, however my linux universal forwarder is not appearing for App client config. 

And also not appearing in forwarder management clients section  .

On Linux Universal Forwarder,  config for the deployment  server and Communication also allowed between UF and DS server. However server is not appearing 

Commands : splunk set deploy-poll 10.1.1.30:8086

                         splunk restart

 

 

Labels (1)
Tags (1)
0 Karma

NDabhi21
Explorer

Hi Matt,

After checking Splunkd logs , communication was allowed and custom app has been installed on the server however server is not reflect in to phonehome

 

0 Karma

matt8679
Path Finder

I would check the server name on the UF and search what you find in the Forwarder Management on the deployment server. It sounds like everything is working.

 

Forwarder management > click on your server class > search the server name found on UF

To get it to show in the monitoring console:

Monitoring console > settings > Forwarder Monitoring Setup > Rebuild Forwarder assets.

Hope this helps.

Matt

0 Karma

matt8679
Path Finder

I would check the splunkd logs on the UF to troubleshoot.

restart the splunk service on the UF and tail the logs.

tail -f /opt/splunkforwarder/var/log/splunk/splunkd.log

 

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...