Hardware and software requirements for the Splunk Add-on for Sophos

Prerequisites

Sophos Enterprise Console runs on Windows systems.

Install a universal forwarder directly on the machines running Sophos Enterprise Console. Install the Splunk Add-on for Windows on each universal forwarder to gather the logs.

See Install a Windows universal forwarder from an installer in the Splunk universal forwarder documentation for instructions on deploying a universal forwarder to Windows.

See Install the Splunk Add-on for Windows in Deploy and Use the Splunk Add-on for Windows for instructions on deploying the Windows Add-on to the universal forwarder.

Splunk Enterprise system requirements

Because this add-on runs on Splunk Enterprise, all of the Splunk Enterprise system requirements apply.