Hardware and software requirements for the Splunk Add-on for Sophos
Sophos Enterprise Console runs on Windows systems.
Install a universal forwarder directly on the machines running Sophos Enterprise Console. Install the Splunk Add-on for Windows on each universal forwarder to gather the logs.
See Install a Windows universal forwarder from an installer in the Splunk universal forwarder documentation for instructions on deploying a universal forwarder to Windows.
See Install the Splunk Add-on for Windows in Deploy and Use the Splunk Add-on for Windows for instructions on deploying the Windows Add-on to the universal forwarder.
Splunk Enterprise system requirements
Because this add-on runs on Splunk Enterprise, all of the Splunk Enterprise system requirements apply.
About the Splunk Add-on for Sophos
Installation overview for the Splunk Add-on for Sophos
This documentation applies to the following versions of Splunk® Supported Add-ons: released