Splunk® Universal Forwarder

Forwarder Manual

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Universal forwarder prerequisites

See the following Universal Forwarder prerequisites sections:

Decide if you want to use the Splunk deployment server

To personalize how data is sent to the indexer, you edit the universal forwarder's configuration files. Through the deployment server, you can edit multiple universal forwarders at once by manually editing a single file. See deployment server and forwarder management in the Updating Splunk Enterprise Instances manual.

Computer Hardware Prerequisites

The universal forwarder has the following minimum processing, RAM, and disk space requirements:

Processing 1.5Ghz
RAM 512MB
Free Disk Space 5GB

Compatible Operating Systems

For compatible operating systems, see Supported Operating Systems in the Splunk Enterprise installation manual.

Last modified on 04 October, 2023
PREVIOUS
Compatibility between forwarders and Splunk Enterprise indexers
  NEXT
Deploy the universal forwarder

This documentation applies to the following versions of Splunk® Universal Forwarder: 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12, 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.2.0


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters