I've seen a lot of documents and posts on compatibility between indexers (Idx) andforwarders, but nothing specific on universal forwarders (U-F) to heavy forwarders (H-F). This is our c...
In our zest to upgrade our Universal Forwarders (UF) , we have seemed to inadvertently upgrade to a version newer than our indexer. We currently are running Splunk Version 6.4.4. The UF on some of t...
I've read all the compatibility matrix docs, but I'm not sure how my situation fits into it. Specifically compatibility when sending data through intermediate Heavy Forwarders. Here's my current e...
Hi, splunkers:
I assume that there are lots forwarder in a environment but the forward port 9997 andmanagement port 8089 are already used on some forwarders by the other applications. I can m...
On Splunk 9.0.0 on windows on one of our dedicated Deployment servers when we go to Settings \ ForwarderManagement in the Web UI we get a nice list of Clients aka systems running the Universal Forwarder...
Hi team I have problems when i monitoring many UF (~ 400 agents) with Distributed Architechture (UF --> HF --> Indexer) as below: 1. When a new UF agent connect to Deployment Server, i ...
Hi all
I am getting this message on Splunk 6.2.0 after upgrading from 5:
The forwardermanagement interface does not support some settings in your serverclass.conf file. The interface is now r...
...PLUNK_HOME/bin/splunk set deploy-poll IP:8089 -auth user:passwd in one of the clients that is not listed in ForwarderManagement, received the the Configuration updated message and restarted it.
H...
Hello, I am looking for best approch for installing andmanaging forwarders. we have everything on Linux. After reading some docs and posts I think deployment server is mostly used for manag...
I would like to change the splunk management port from 8089 to some higher port say 9089. What is the best way to do this? Should i use the Splunk CLI or change it using web.conf file? Also I am u...