My installation of the Spunk is right out of the box, standard. I followed all the documentation to the letter, used all recommended settings, groups, names, ports, etc.
In the Splunk interface I configured receiving to listen to 9997. And I installed the Deployment Monitor app.
I installed the Universal Forwarder on a remote host and selected all the inputs and a directory with a log file. All other the defaults used (also using 9997)
I verified that the server is reachable and listening on the correct port from the remote host.
After all this the Deployment monitor still says No forwarders and no data is available in search.
What am I missing here?