Splunk® Enterprise

Add Microsoft Windows data: Splunk Cloud

Download manual as PDF

Download topic as PDF

Install the Splunk universal forwarder

To forward your data into your Splunk Enterprise deployment, install the universal forwarder on your remote Windows host by completing the following steps:

  1. Download the Splunk universal forwarder.
  2. Double-click the MSI file to start the installation.
  3. Click View License Agreement.
  4. Select the Check this box to accept the License Agreement check box.
  5. To change any of the default installation settings, click Customize Options.
  6. Click Install to install the software with the defaults.
  7. (Optional) In the Receiving Indexer pane, enter a host name or IP address and the receiving port for the receiving indexer that you want the universal forwarder to send data to, and then click Next.
  8. Click Install. The installer runs and displays the Installation Completed dialog. The universal forwarder starts automatically.
  9. From the Control Panel, confirm that the SplunkForwarder service runs.
Enable Windows data collection
Install Splunk Add-on for Windows on your forwarder

This documentation applies to the following versions of Splunk® Enterprise: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 8.0.0

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters