Getting Data In

Why is our universal forwarder not visible in the Forwarder Management console?

arandi
Explorer

I have completed the universal forwarder setup, and configured it as a deployment client of the Cloud Instance. But, I'm still not able to view the forwarder in the Forwarder Management console.

I have checked firewall rules for outbound traffic, and it is going trough the required ports.

0 Karma
1 Solution

marycordova
SplunkTrust
SplunkTrust

Check if the below helps:

  1. verify the hostname in /opt/splunk/etc/system/local/inputs.conf
  2. delete /opt/splunk/etc/instance.fcg
  3. restart the forwarder
@marycordova

View solution in original post

0 Karma

marycordova
SplunkTrust
SplunkTrust

Check if the below helps:

  1. verify the hostname in /opt/splunk/etc/system/local/inputs.conf
  2. delete /opt/splunk/etc/instance.fcg
  3. restart the forwarder
@marycordova
0 Karma

arandi
Explorer

Awsome… it worked perfectly.

just a minor correction: the actual directory is under /opt/splunkforwarder/ instead of just /etc/splunk.

but great..

thank you so much

Gabriel

arandi
Explorer

You're awesome... it worked perfectly. just a minor correction here: the actual directory is "/opt/splunkforwarder/" instead of just /etc/splunk, but perfect..

thank you so much..

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...