I'm getting the following warning http://answers.splunk.com/answers/65836/ack-not-enabled-on-forwarder
Instead of only seeing 3 ips in the warning banner I would like to have an overview or list of all forwarders with this issue.
Hello
Here you go:
index="_internal" "ack=false" | dedup hostname | table hostname, sourceIp
regards