Reporting

connectivity between forwarder and deployment server

anoopambli
Communicator

Is there any CLI option in unversal forwarder to check if it is establishing connection with deployment server?

We are using HPOO automation tool to install splunk forwarder on windows and linux servers, last step of installation copies deploymentclient.conf file to %SPLUNK_HOME%\etc\system\local directory. Wanted to know if there is any command available to make sure that it can connect to deployment server.

Tags (1)
0 Karma

Drainy
Champion

There are a whole host of commands available which you can use on the UF or deployment server, have a look at;
http://docs.splunk.com/Documentation/Splunk/latest/Admin/CLIadmincommands

You can also have a look through splunkd.log to see for connections or app downloads.

DaveSavage
Builder

You may consider looking at the other end, albeit this doesn't strictly address your request - but to check the visibility of the host at the indexer confirms the forwarder is working AND gives you opportunity to check the data stream plus the rate of indexing. All that completes the job, as opposed to checking at the send end ?
If you have network access you would also see the traffic - worthwhile in case sure, it's sending but with no result i.e. you have firewall issues.

Drainy
Champion

My only comment on this is that it is the UF that initiates the connection when it phones home so in this case it is sometimes easier to quickly check on the UF that it is trying to connect

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...