When I install Splunk Enterprise or Splunk universal forwarder on Linux I note that by default making a new user named splunk right? And then I enable boot-start for this user and all things are good But on Windows, there is no default user made named splunk so should I make the user manually, then enable boot-start from this user? Also, how can I know who is the user who running splunk on my Windows machine? Even if it's Splunk Enterprise or Splunk Universal Forwarder         ... View more

How can I troubleshoot the deployment server or universal or heavy forwarder? I set up deployment server then in forwarders I run ./splunk set deploy-poll ip:port  But Forwarder Management clients = 0! Why? How can I troubleshoot it and solve it?   in forwarder: cat /opt/splunkforwarder/etc/system/local/deploymentclient.conf [target-broker:deploymentServer] targetUri = X.X.X.58:8089   in deployment-server:   /opt/splunk/bin/splunk list deploy-clients WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for details. No deployment clients have contacted this server.   Note: the forwarder and deployment server in Google Cloud VMs Note: I tried it on a local server, and it's running right   can anyone help me?                      ... View more