Dears, After upgraded Splunk from 9.1.2 version to 9.2.0 version, the deployment server not showing the clients, but Splunk receiving logs from clients, and also the client...
How can I troubleshoot the deployment server or universal or heavy forwarder?
I set up deployment server then in forwarders I run ./splunk set deploy-poll ip:port
But ForwarderManagement...
Hello, I am looking for best approch for installing and managing forwarders. we have everything on Linux. After reading some docs and posts I think deployment server is mostly used for manag...
I have two host names under clients in Forwardermanagement. I need to export these host names to a excel or csv so that i can use it in a search. Is that possible?
Linux, RHEL 8.9. Splunk 9.2.0.1 Had a forwardermanager running (for years) with 2,000+ clients connecting. Did the upgrade from 9.1 to 9.2.0.1 and now have "No clients phoned home....
When I add clientsto the deployment server - server class tab
for example
Server Class > windows_wkstns > edit > edit clients
include(whitelist)
I get the following options:
C...
...Management page So I tried to test it by uninstalling Splunk Enterprise 9.2.0.1 on Linux and installing Splunk Enterprise 9.1.3. Then I configured deployment clients from Universal Forwarder and f...
On Splunk 9.0.0 on windows on one of our dedicated Deployment servers when we go to Settings \ ForwarderManagement in the Web UI we get a nice list of Clients aka systems running the Universal Forwarder...
...PLUNK_HOME/bin/splunk set deploy-poll IP:8089 -auth user:passwd in one of the clients that is not listed in ForwarderManagement, received the the Configuration updated message and restarted it.
H...
...deployment server and re-introducing the forwardermanagementto a Splunk environment, a previous iteration used it but oddly not the current one. And I was wondering, if I enable ForwarderManagement...