Monitor forwarder instances
The CMC Forwarders: Instance dashboard provides information to Splunk Cloud Platform administrators about the status and health of the forwarders in your deployment.
Review the Forwarders: Instance dashboard
This dashboard contains two panels with tabular and graphical data for a specified forwarder instance. Set a time range to filter the results.
To investigate your panels, go to Cloud Monitoring Console > Forwarders > Forwarders: Instance. Use the following table to understand the dashboard interface.
| Panel or Filter | Description |
|---|---|
| Instance and Time Range | Specify a forwarder instance and a time range. These settings apply to both panels in the dashboard.
Note: When you view this dashboard, the Instance field is automatically populated with the first menu value. Be sure to change this default value to the forwarder instance you are investigating.
|
| Status and Configuration | Lists the following information for the specified forwarder:
|
| Outgoing Data Rate | Shows a graph that compares events per second and KB per second processed by the instance over the selected time range. Select an Aggregation value of either Maximum or Average. |
Interpret forwarder instance results
When interpreting your forwarder instance results, note the following:
- Check that your forwarder's version is up-to-date.
- Use the IP address information to identify any faulty receivers in your local network.
- Compare the receiver count against the number of deployed indexers. A significant difference in these numbers indicates that there is likely a misconfiguration in the system.
- Review the graph in the Outgoing Data Rate panel and ensure that the forwarder is emitting data within its normal expected range. In particular, check the rates for average KB per second and events per second against their historical average rates. A rate that is significantly different from this historical rate, such as being very high or very low, could indicate an issue on the forwarding host.