Verify the status of agents lookup

Confirm whether the agents lookup is enabled and check the freshness of the data it provides by reviewing the status of the saved search.

To confirm whether the agents lookup is enabled and to check the freshness of the data it provides, and to check for issues with the agents lookup, review the status of the saved search.

  1. Log in to Splunk Web.
  2. From the top menu, select Settings, then Searches, reports, and alerts.
  3. On the Searches, Reports, and Alerts page, change the App filter to SplunkDeploymentServerConfig.
  4. Change the Owner filter to All.
  5. Locate the saved search named DeploymentServerCreateAgentsLookup.
  6. Review the Next Scheduled Time column.
    If a time is displayed, the agents lookup is scheduled to run.
  7. To view recent executions, select View recent in the row for the saved search.
    The Job Management page opens.
  8. In the table, review the Created at column to see the execution times of the last two runs of the job.
  9. To view detailed job information, select the name of the DeploymentServerCreateAgentsLookup job in the Job column.
    The job information pane is displayed on the right. It shows details, including any info or warning messages related to the job's execution. If warnings are present, they might affect the returned data. To resolve the issues, see Troubleshoot agents lookup issues.