topic Re: Splunk Add-On for Sophos Mac Compatibility in Getting Data In

Splunk Add-On for Sophos Mac Compatibility

pc1 — Tue, 17 Aug 2021 20:10:16 GMT

Is the Splunk Add-On for Sophos compatible with getting data from my Macs? I have a deployment server (on Windows, the only OS compatible with hosting the Sophos Add-On) with Macs and Windows machines in my environment w/ the Universal Forwarder installed. I want to use this add-on to collect Sophos data from both my macs and windows machines but can't find anywhere if it will work.

Re: Splunk Add-On for Sophos Mac Compatibility

venkatasri — Wed, 18 Aug 2021 13:24:42 GMT

Hi @pc1

It supports only on Windows as per docs no MAC. You shall be able to deploy only to Windows UF from DS by blacklisting mac UF's. support. https://docs.splunk.com/Documentation/AddOns/released/Sophos/Hardwareandsoftwarerequirements

---

an upvote would be appreciated if this reply helps!