topic Re: Splunk Universal Forwarder on Win 2000? in Getting Data In

Splunk Universal Forwarder on Win 2000?

tpaulsen — Thu, 26 May 2011 07:13:29 GMT

Hallo,

we know it´s not supported officially, but we have some very old Windows 2000 server, that won´t be upgraded before next year, but we need to install Splunk on them. Will the Universal Forwarder work on Windows 2000?

Thank you!

Re: Splunk Universal Forwarder on Win 2000?

fcorbin — Thu, 26 May 2011 13:04:50 GMT

I am new to Splunk so there may be things I haven't seen. FWIW, I installed Splunk as an indexer on a Win 2000 server and it worked fine. I later converted that machine to be a forwarder and it still works fine.

Re: Splunk Universal Forwarder on Win 2000?

tpaulsen — Thu, 26 May 2011 13:06:27 GMT

Hello, thank you. Did you install the Splunk Forwarder 4.2.1?

Re: Splunk Universal Forwarder on Win 2000?

fcorbin — Thu, 26 May 2011 13:13:18 GMT

I think there may be a difference between the forwarder and the configuration I have, but I have yet to figure out what it is, so here's what I know...

I installed Splunk 4.2.1 (Enterprise trial, but since then the trial ran out, so I am running the free license now). Go to Manager > Forwarding and receiving > Forwarding defaults, chose not to store local copy of the events (otherwise I guess this would be an indexer as well). Then go to Configure forwarding and add the host you want to send data to.

good luck...

Re: Splunk Universal Forwarder on Win 2000?

tpaulsen — Thu, 26 May 2011 13:15:41 GMT

fcorbin, thank you, i guess than Splunk> does not try to force you to install on only supported plattforms like other products (BMC....) do...

Re: Splunk Universal Forwarder on Win 2000?

tpaulsen — Thu, 14 Jul 2011 14:44:16 GMT

Yep 4.2.1 works on Win 2000.

Re: Splunk Universal Forwarder on Win 2000?

mendesjo — Tue, 25 Oct 2016 19:02:35 GMT

I've tested upto 5.0 works..