Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
274 results
Sorted by:
01-24-2022
09:17 AM
...uestion is: if we are unable to push new certificate by weekend will the universal forwarders stop logging the data and sharing it with indexes? Thank you
Labels
- Labels:
-
administration
-
upgrade
-
using Splunk Cloud
09-04-2014
08:17 AM
4 Karma
On one of our Universal Forwarders the splunkd service stopped running. I was able to restart it and it is now working fine. I was hoping that someone could tell me something about the error i f...
06-25-2012
10:10 AM
...ed to the indexer properly. I have checked that the log file which is not forwarded is being updated continuously in real time.
I am using Universal forwarder (splunkforwarder-4.3.2-123586-x64-r...
05-06-2014
07:11 AM
I have a windows domain controller with a universal forwarder.
I have Splunk_TA_Windows deployed out to it using the universal forwarder(this is the only app deployed),
I have an outputs.conf f...
02-17-2022
04:36 AM
...n the "Windows" index
What happens is that about 1-2x a day, the logs sent by Universal Forwarders stop from all machines leaving the Windows index blank. All other data t...
Labels
Show results in replies (4)
-
...ardware for your HF? which other jobs are scheduled in your Heavy Forwarder? are you sure that, when forward...
-
...ueues are filling on the UF side , due to some sources sending too much data at once. and any n...
-
...ook what it situation on HF side is add it as an indexer with e.g. IHF custom group defined into MC. The...
-
...or stanza default-autolb-group) is down/unavailable causing data ingestion to stop. Use "I...
07-21-2015
06:19 AM
I have the universal forwarder installed on one of our Windows servers and it has been forwarding logs with no issue for some time now till this morning. One of our dashboards didn't report getting a...
06-14-2017
09:51 AM
1 Karma
On all the Universal Forwarders, any user has the ability to access REST API called Splunk ATOM Feed:Splunkd. They can access this on any Universal Forwarder by putting in https:localhost:8089 or l...
11-01-2021
05:34 AM
The Splunk Documentation has steps to upgrade a Universal Forwarder to a Heavy Forwarder. But not any steps on downgrading. Is it the same steps except swap where it says UF for HF and HF f...
Labels
- Labels:
-
heavy forwarder
-
universal forwarder
09-22-2011
08:27 AM
1 Karma
...plunkForwarder
SplunkForwarder UNCONFIGURED ENABLED INVISIBLE
Now the problem: If I enable light forwarding via GUI on the Heavy Forwarder, somehow my Universal Forwarder c...
09-06-2019
01:36 PM
1 Karma
Hi,
We have a Universal Forwarder on our Linux rSyslog server. It was working fine until two weeks ago. The problem was it would stop sending data to the indexer, but showed no errors in the s...
