Deployment Architecture

DMC vs Deployment server - different number of forwarders

Robbie1194
Communicator

Hi Splunkers,

I have noticed my DMC shows around 1450 forwarders (180 of which are missing) but my Deployment Sever GUI tells me that there are 1500 that have reported in with their normal heartbeat as expected with only 20 or so not having reported in as expected.

Does anyone know why these figures might be different? Or does anyone have any advice on how I can investigate and possibly resolve the issue?

Thanks!

0 Karma
1 Solution

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

View solution in original post

0 Karma

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...