Getting Data In

How do I get hosts (universal forwarders) show on the Splunk Light home page?

bmalone
New Member

I have Splunk Light installed and set up on my server. I have the receiving port set. On the client I want Splunk Light to monitor, I have installed the Universal Forwarder and pointed it to the Splunk Light server and port. On the Splunk light server I have added the forwarder, but on the Splunk Light home page, under the Hosts column, the client computer is not getting listed. What am I missing?

0 Karma

jterry
Splunk Employee
Splunk Employee

i think the hosts listing on the home page derives it's values from the data that's been ingested, namely the "host=" field. If no data has been sent by the forwarder(s) in question, then it/they will not appear in the listing. Additionally, if a forwarder is sending data but that data already has a "host" field in it, that value may preclude the forwarders inclusion in the list. If a global search "*" returns data/events then look at the hosts value attached to them. Those values should be listed on the home page.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...