topic Universal Fowarder support Apps in Getting Data In

Universal Fowarder support Apps

ngcgoon — Tue, 17 May 2011 15:08:28 GMT

I haven't seen any conclusive documentation on this, however does the Universal forwarder support Apps like the Splunk for windows app? I want to monitor server health, last time you have to install the app on the server and on the indexer. I would be nice to have that app running with the universal forwarder even if it's command line configured else I will use the splunk light forwarder.

Re: Universal Fowarder support Apps

dwaddle — Tue, 17 May 2011 16:10:53 GMT

Universal forwarder can support a large percentage of Splunk Apps - but there will be some that won't work. Some apps may have python scripted inputs that may not work on universal forwarder, because it does not include the python runtime.

I know UF can support Splunk for *nix, and I assume Splunk for Windows works as well (but I'm not sure)

The vaguest (but most accurate) answer is "it depends on the app"

Re: Universal Fowarder support Apps

sf-mike — Mon, 30 Jan 2012 22:34:27 GMT

If you have apps that use python, you can still use them. You'll just have to install python separately.

Re: Universal Fowarder support Apps

araitz — Tue, 31 Jan 2012 02:42:30 GMT

You will also need to make sure that the path to python is in Splunk's system path and that all the necessary modules (e.g. splunk, splunk.search, splunk.auth) are present.