topic Re: Which version of Splunk Forwarder works with Security Onion 64 bit? in Deployment Architecture https://community.splunk.com/t5/Deployment-Architecture/Which-version-of-Splunk-Forwarder-works-with-Security-Onion-64/m-p/410025#M14722 <P>Hi, do you want to install a forwarder on Security Onion server and then send the logs to another Splunk indexer? <BR /> may we know if you have checked this app "Security Onion App for Splunk software"<BR /> <A href="https://splunkbase.splunk.com/app/972/">https://splunkbase.splunk.com/app/972/</A></P> <P>maybe check this blog:<BR /> <A href="https://www.elysiumsecurity.com/blog/IDS/post2.html#Splunk">https://www.elysiumsecurity.com/blog/IDS/post2.html#Splunk</A></P> Tue, 30 Jul 2019 11:29:20 GMT inventsekar 2019-07-30T11:29:20Z Which version of Splunk Forwarder works with Security Onion 64 bit? https://community.splunk.com/t5/Deployment-Architecture/Which-version-of-Splunk-Forwarder-works-with-Security-Onion-64/m-p/410024#M14721 <P>I am trying to find a version of the Linux Splunk forwarder that works with Security Onion - previously in the past Security Onion was a bit fussy with what distro could be used, and since it's been updated in Oct 18, (now using a 64 bit Ubuntu release underneath) 4.15.0-48-generic kernel - I can't get a version of the forwarder to work - if anyone has had any success with the newer Sec Onion, please could you let me know. Ta.</P> Tue, 30 Jul 2019 07:18:42 GMT https://community.splunk.com/t5/Deployment-Architecture/Which-version-of-Splunk-Forwarder-works-with-Security-Onion-64/m-p/410024#M14721 robnewman353 2019-07-30T07:18:42Z Re: Which version of Splunk Forwarder works with Security Onion 64 bit? https://community.splunk.com/t5/Deployment-Architecture/Which-version-of-Splunk-Forwarder-works-with-Security-Onion-64/m-p/410025#M14722 <P>Hi, do you want to install a forwarder on Security Onion server and then send the logs to another Splunk indexer? <BR /> may we know if you have checked this app "Security Onion App for Splunk software"<BR /> <A href="https://splunkbase.splunk.com/app/972/">https://splunkbase.splunk.com/app/972/</A></P> <P>maybe check this blog:<BR /> <A href="https://www.elysiumsecurity.com/blog/IDS/post2.html#Splunk">https://www.elysiumsecurity.com/blog/IDS/post2.html#Splunk</A></P> Tue, 30 Jul 2019 11:29:20 GMT https://community.splunk.com/t5/Deployment-Architecture/Which-version-of-Splunk-Forwarder-works-with-Security-Onion-64/m-p/410025#M14722 inventsekar 2019-07-30T11:29:20Z