Splunk Search

Changing of management port still pointing to DS & receiving the logs.

N92
Path Finder

My question might be weird.
I change the management port on one of endpoint(universal forwarder)from multiple forwarders but still I receiving logs & client report to DS. Why it works correctly?

Tags (1)
0 Karma
1 Solution

micahkemp
Champion

The management port of the universal forwarder doesn't affect any other settings on that forwarder, including (but not limited to) where it forwards its logs, where it phones home as a deployment client, etc.

The management port only affects which port you would need to use to talk to your universal forwarder, for REST API calls, for instance.

View solution in original post

micahkemp
Champion

The management port of the universal forwarder doesn't affect any other settings on that forwarder, including (but not limited to) where it forwards its logs, where it phones home as a deployment client, etc.

The management port only affects which port you would need to use to talk to your universal forwarder, for REST API calls, for instance.

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...