please I need help ,
I deployed a universal forward by following tutorial "distributed deployement manual"
The universal forward is in the machine configured like this:
inputs.conf
[default]
host = atelcom-62de949
[monitor://Documents and Settings\sarah\Bureau\splunk image]
disabled = false
output.conf
[tcpout]
defaultGroup = 192.168.0.45_9997
[tcpout:192.168.0.45_9997]
server = 192.168.0.45:9997
[tcpout-server://192.168.0.45:9997]
The Splunk instance (the indexer) is installed in a windows server 2008 virtual machine.
I enable the receiver but when i use the deployment monitor to see the forwarder and I don't find anything from it, it doesn't seem to be working.
Can you please tell me how to fix this?
... View more