Deployment Architecture

DMC vs Deployment server - different number of forwarders

Robbie1194
Communicator

Hi Splunkers,

I have noticed my DMC shows around 1450 forwarders (180 of which are missing) but my Deployment Sever GUI tells me that there are 1500 that have reported in with their normal heartbeat as expected with only 20 or so not having reported in as expected.

Does anyone know why these figures might be different? Or does anyone have any advice on how I can investigate and possibly resolve the issue?

Thanks!

0 Karma
1 Solution

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

View solution in original post

0 Karma

WalshyB
Path Finder

Hey,

From my understanding the DMC uses a search that only counts forwarders that have sent data to the indexers, sometimes a forwarder can be phoning home but never actually send data (internal, monitored paths..). Which will not show up in the DMC, but will show up on the DS Forwarder Management.

Regards,
Brad

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...