topic Forwarder for Linux ARM (Raspberry Pi): Will Splunk deprecate this add-on and/or update it with a mention of the regular ARM forwarder build? in Deployment Architecture

Forwarder for Linux ARM (Raspberry Pi): Will Splunk deprecate this add-on and/or update it with a mention of the regular ARM forwarder build?

frankwayne — Wed, 19 Apr 2017 14:18:48 GMT

It looks like there is now a regular ARM version of the UF (Universal Forwarder). It's confusing to have this old add-on, Forwarder for Linux ARM (Raspberry Pi), and a regularly updated UF build, especially since there's no mention here of the ARM version in the regular UF channel. Will this add-on be removed from Splunkbase now?

Re: Forwarder for Linux ARM (Raspberry Pi): Will Splunk deprecate this add-on and/or update it with a mention of the regular ARM forwarder build?

Lowell — Wed, 19 Apr 2017 19:05:01 GMT

+1 Yes, this is confusing. Please remove the app, or at least provide a link to the UF download page and tell people to download the Linux "ARMv6" tgz package at this link: https://www.splunk.com/en_us/download/universal-forwarder.html#tabs/linux

Re: Forwarder for Linux ARM (Raspberry Pi): Will Splunk deprecate this add-on and/or update it with a mention of the regular ARM forwarder build?

pbalsley — Mon, 19 Jun 2017 22:24:42 GMT

I've been waiting for this app to be updated for Pi v3. Though always wondered why it was an app and not part of the normal Splunk UF downloads.

So are you saying that I can simply download the ARM linux UF from splunk and use it? I'm going to go give it a shot.

Re: Forwarder for Linux ARM (Raspberry Pi): Will Splunk deprecate this add-on and/or update it with a mention of the regular ARM forwarder build?

pbalsley — Tue, 20 Jun 2017 02:26:41 GMT

So to answer my own question. yes the ARM UF works just fine on the Raspberry Pi ver 3 model B.