Splunk searches relating to Universal Forwarder

clear
index=_internal sourcetype=splunkd "TailReader - File descriptor cache is full" "trimming" | stats count by host
0 comments
index=_internal tcpouteloop "connected to idx" | stats count by idx
0 comments