On Splunk 9.0.0 on windows on one of our dedicated Deployment servers when we go to Settings \ Forwarder Management in the Web UI we get a nice list of Clients aka systems running the Universal Forwarder so far so good
My question is how can I see what Search is generating this result ie this list of machines? unlike some of the other screens there is no magnifying glass icon to click on to invoke the search pane
I don't know that exact search but have used the below search to get an exportable list of deployment clients.
| rest splunk_server=local /services/deployment/server/clients
| table hostname utsname
| sort utsname
I don't know that exact search but have used the below search to get an exportable list of deployment clients.
| rest splunk_server=local /services/deployment/server/clients
| table hostname utsname
| sort utsname
Paul you my friend are a Rock Star !!! that's exactly what I needed