Splunk® Add-on for Windows

Deploy and Use the Splunk Add-on for Windows

This documentation does not apply to the most recent version of Splunk® Add-on for Windows. For documentation on the most recent version, go to the latest release.

Other deployment considerations

In many scenarios, the Splunk Add-on for Windows installs on a Windows host and collects data from that host. You then use Splunk Web to browse the data that the app collects, or use the Splunk App for Windows Infrastructure or another Splunk app to present the data.

There are additional uses for the add-on:

  • You can use the add-on to collect Windows data from a number of Windows hosts by installing a universal forwarder on each host and deploying the app to those forwarders. Once the app is installed on each forwarder, you can then forward the data to a receiving indexer that runs the Splunk App for Windows Infrastructure or another Splunk app.
  • You can also install the add-on into a Splunk search head or indexer to provide data inputs and knowledge for other apps installed on the instance, such as Splunk Enterprise Security or Splunk IT Service Intelligence.

Configure the Splunk Add-on for Windows on multiple hosts

To install and configure forwarders on multiple hosts, follow the instructions in "Deploy the Splunk Add-on for Windows with Forwarder Management."

Last modified on 23 February, 2018
What data the Splunk Add-on for Windows collects   Install the Splunk Add-on for Windows

This documentation applies to the following versions of Splunk® Add-on for Windows: 4.7.0, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.8.0, 4.8.1, 4.8.2, 4.8.3, 4.8.4


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters