I ended up doing this: [source::bomgar_get_logged_in_reps] TRANSFORMS-xml = remove-xmlheader TRANSFORMS-remove = remove-logged-in-reps [bomgar_get_logged_in_reps] BREAK_ONLY_BEFORE = <rep[^>]+>.*? MUST_BREAK_AFTER = </rep> EXTRACT-repType = (?i)<type>(?P<type>\w+)(?=<) and that made it so the last rep block showed up. 🙂 ... View more

I referred the below link and checked on the List of incompatibilities between the old serverclass.conf and what is supported by Forwarder Management.On commenting the unsupported attributes in serverclass.conf the Forwarder management page is showing details. [global] whitelist.0 = * restartSplunkd = true stateOnClient = enabled disabled = true https://answers.splunk.com/answers/185547/forwarder-management-issue.html http://docs.splunk.com/Documentation/Splunk/6.2.1/Updating/Forwardermanagementcompatibility#List_of_incompatibilities ... View more