Splunk® Enterprise

Add Microsoft Windows data: Single instance

Splunk Enterprise version 7.2 is no longer supported as of April 30, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Install the Splunk universal forwarder

To forward your data into your Splunk Enterprise deployment, install the universal forwarder on your remote Windows host by completing the following steps:

  1. Download the Splunk universal forwarder.
  2. Double-click the MSI file to start the installation.
  3. Click View License Agreement.
  4. Select the Check this box to accept the License Agreement check box.
  5. To change any of the default installation settings, click Customize Options.
  6. Click Install to install the software with the defaults.
  7. (Optional) In the Receiving Indexer pane, enter a host name or IP address and the receiving port for the receiving indexer that you want the universal forwarder to send data to, and then click Next.
  8. Click Install. The installer runs and displays the Installation Completed dialog. The universal forwarder starts automatically.
  9. From the Control Panel, confirm that the SplunkForwarder service runs.
Last modified on 02 July, 2019
Enable Windows data collection   Install the Splunk Add-on for Windows on the universal forwarder

This documentation applies to the following versions of Splunk® Enterprise: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters