How do you remove missing forwarders from the Monitoring Console?
How do you remove missing forwarders from the Monitoring Console?
To remove missing forwarders from the Monitoring Console, you need to rebuild the forwarder asset table. This process updates the asset table, removing records of forwarders that are no longer active or present, thereby ensuring the data is current and accurate.
D is correct. More info here <https://docs.splunk.com/Documentation/Splunk/7.3.1/DMC/Configureforwardermonitoring#Rebuild_the_forwarder_asset_table>
Agreed D. Quoting the reference URL "The data in the forwarder asset table are cumulative. If a forwarder connects to an indexer, its record exists in the table. Then if you later remove the forwarder from your deployment, the forwarder's record is not removed from the asset table. It is instead marked "missing" in the asset table, and it still appears in the DMC forwarder dashboards. To remove a forwarder entirely from the DMC dashboards, click rebuild forwarder assets ...
D is correct