I've just upgrade a splunk server from 4.1.7 to 4.2.1.
After the upgrade,I enabled the deployment monitor and noticed that it prompts me about a number of missing forwarders.
the last connected time shown for those forwarders is the time I performed the upgrade.
However I did a search to check but those forwarders are actually active and is sending data.
asked 09 Jun '11, 19:45
Did the missing forwarders warning disappear after 24 hours? I can believe that you got the warning since we use a different definition to uniquely identify forwarders in the 4.2.1 version. Let us know if the warning persists past 24 hours (that's how far back the data is searched to look for missing forwarders).
answered 10 Jun '11, 10:00