I have installed the universal forwarder on a server and would like the indexer to see the host.
I ran a netstat -nap | grep 9997
on the indexer and it shows that communication is established put I am not seeing the host listed in data summary hosts.
Can you help me get it there?
Run this:
| metadata type=hosts index=*