Splunk Enterprise version 7.2 is no longer supported as of April 30, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise.
For documentation on the most recent version, go to the latest release.
Install the Splunk Add-on for McAfee on the heavy forwarder
- Download the add-on from Splunkbase.
- From the Splunk Web home screen on your heavy forwarder, click the gear icon next to Apps.
- Click Install app from file.
- Locate the downloaded file and click Upload.
- If the forwarder prompts you to restart, do so.
Verify installation by finding the Splunk Add-on forMcAfee at $SPLUNK_HOME/etc/apps/Splunk_TA_mcafee
Last modified on 28 September, 2018
| Install DB Connect on your heavy forwarder | Documentation:Splunk:AddMcafeesingle:InstallTA:7.2.0 |
This documentation applies to the following versions of Splunk® Enterprise: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10
Download manual
Feedback submitted, thanks!