https://community.splunk.com/t5/Getting-Data-In/SplunkLightForwarder-has-been-deprecated-in-Splunk-6/m-p/119225#M24754 <P>initially I had thought that the SplunkLightForwarder had less impact on performance when installed on a platform, however I have now read that the Universal Forwarder is in fact a more lighter and better solution (Correct me if Im wrong).</P> <P>I had previously installed a number of LightForwarders on some of my platforms, but after reading that SplunkLightForwarder has now been deprecated from Splunk 6, should I now move to the Splunk Universal Forwarder Solution?</P> Mon, 20 Jan 2014 04:23:28 GMT Dark_Ichigo 2014-01-20T04:23:28Z https://community.splunk.com/t5/Getting-Data-In/SplunkLightForwarder-has-been-deprecated-in-Splunk-6/m-p/119225#M24754 <P>initially I had thought that the SplunkLightForwarder had less impact on performance when installed on a platform, however I have now read that the Universal Forwarder is in fact a more lighter and better solution (Correct me if Im wrong).</P> <P>I had previously installed a number of LightForwarders on some of my platforms, but after reading that SplunkLightForwarder has now been deprecated from Splunk 6, should I now move to the Splunk Universal Forwarder Solution?</P> Mon, 20 Jan 2014 04:23:28 GMT https://community.splunk.com/t5/Getting-Data-In/SplunkLightForwarder-has-been-deprecated-in-Splunk-6/m-p/119225#M24754 Dark_Ichigo 2014-01-20T04:23:28Z https://community.splunk.com/t5/Getting-Data-In/SplunkLightForwarder-has-been-deprecated-in-Splunk-6/m-p/119226#M24755 <P>Hi Dark_Ichigo,</P> <P>Yes, you should use the Universal Forwarder like stated in the <A href="http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/Deprecatedfeatures#Feature_support">docs</A>. </P> <P>One thing to remember: you cannot actually upgrade from the light forwarder to the universal forwarder. You only can 'migrate' your light forwarder settings to the universal forwarder. This is an important distinction.</P> <P>Unlike the light forwarder, the universal forwarder is an entirely separate download and executable from full Splunk. Do not install it over an existing installation of full Splunk (including light forwarder or heavy forwarder). </P> <P>After the initial setup of the Universal Forwarder the upgrade is easy, there are two docs on <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/Deploy/Upgradethenixuniversalforwarder">upgrade the unix universal forwarder</A> and <A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/UpgradetheWindowsuniversalforwarder">upgrade the windows universal forwarder</A></P> <P>hope this helps ...</P> <P>cheers, MuS</P> Mon, 20 Jan 2014 06:59:00 GMT https://community.splunk.com/t5/Getting-Data-In/SplunkLightForwarder-has-been-deprecated-in-Splunk-6/m-p/119226#M24755 MuS 2014-01-20T06:59:00Z