Create a Forwarder

When a new customer is created in the platform, it generates a new Forwarder automatically, which will be available in the Integrations section.

If multiple Forwarders need to be generated for the same customer—either to chain them or to deploy a Forwarder in different locations—the following procedure should be followed:

1

Go to the Integrations → Data Sources section.

2

Select the client from the dropdown menu.

3

Click “New Forwarder”.

4

Assign a name to the Forwarder.

5

Select the Forwarder output: a. Collector (default): This Forwarder will send events directly to the platform. b. Forwarder: This option allows you to chain this Forwarder to a previously existing one.

6

Click “Add Forwarder”.

At this point, the new Forwarder is ready for downloading & installation.

When a Forwarder is created, it appears as Pending in orange color. This indicates that the Forwarder has been successfully registered in the Platform, but it is not yet available to send or receive logs. This status may be due to the following reasons:

• The Forwarder has not been installed yet.

• The Forwarder has been installed, but its network configuration is incomplete, and it cannot reach the Platform over the Internet.

• The Forwarder has been installed and network connectivity configured, but an intermediate element (e.g., a client-side firewall) is preventing the Forwarder from connecting to the Platform.