Where in Splunk can I find which forwarders are actively forwarding data to my Splunk server? I'm on the Splunk server and checked my inputs.conf and that didn't have much info.
Exactly what I needed, thanks
The Splunk On Splunk app has a lot of saved searches with useful data about the topology, do you tried?
Well this is where it gets tricky.. We have 3 different instances on the Splunk UI with massive amounts of data in it. Each instance has different servers forwarding data to it and I would prefer to go to my Splunk server and get a high level overview of everything being forwarded