topic Forwarder Upgrade 2012 in Splunk Enterprise

Forwarder Upgrade 2012

SirDrake7 — Mon, 21 Dec 2020 20:18:11 GMT

I am running Splunk 7.32 preparing to upgrade to Splunk 8.1.1 so I know I need to upgrade my forwarder's, before moving to Splunk 8 for compatibility. When I go to download the Universal Forwarder for my 2012 servers it only shows 7.3.8 as one compatible with 2012. So does that mean Splunk version 8 does not fully support Windows server 2012?

Thanks for any assistance.

Re: Forwarder Upgrade 2012

richgalloway — Mon, 21 Dec 2020 22:05:25 GMT

Correct, Splunk no longer supports Win2012. You can, however, use older versions of the UF with Splunk 8 indexers. See https://docs.splunk.com/Documentation/Forwarder/8.1.1/Forwarder/Compatibilitybetweenforwardersandindexers

Re: Forwarder Upgrade 2012

SirDrake7 — Tue, 22 Dec 2020 13:41:35 GMT

So using the 7.x forwarder with the 8.x Indexer I will still have Events and Metrics which will allow me more time for my 2012 upgrades. Thanks so much for your help.