On the forwarder management, I was missing a client (which is indexing data and showing in search as well)
That same client/forwarder appears under the monitoring console forwarders.
I followed the below link and deleted instance.cfg and then restarted my forwarder.
https://answers.splunk.com/answers/694188/why-is-our-universal-forwarder-not-visible-in-the.html
Now I have 4 forwarders of the same host (different guids) in my monitoring console section and it is still not showing up on forwarder management section.
Any ideas on how to resolve this?
↧