topic Re: W2K Universal Forwarder in Getting Data In

W2K Universal Forwarder

emccaslin — Thu, 19 Dec 2013 21:27:59 GMT

I have a Windows 2000 box that we would like to install a universal forwarder on to push to our Splunk server that is already running with other forwarders configured to it.

The problem is that I cannot find a universal forwarder that is compatible with Windows 2000. I have installed a version of Splunk on it, but I do not want it to index the data or interfere with the license of the other server.

Optimal solution is to be directed to a universal forwarder that is compatible with Windows 2000.

I see Splunk Universal Forwarder on Win2000? but I was hoping that since 2011 we have a better solution.

Re: W2K Universal Forwarder

jbsplunk — Thu, 19 Dec 2013 22:43:30 GMT

Splunk only goes back as far as Windows Server 2003 and Windows XP. Unfortunately, there isn't anything supported on Windows that goes back to w2k. Please see the documentation on this topic for supported platforms.

Re: W2K Universal Forwarder

Chubbybunny — Thu, 19 Dec 2013 22:45:50 GMT

W2K in 2013

Re: W2K Universal Forwarder

lguinn2 — Thu, 19 Dec 2013 22:47:28 GMT

No - Microsoft has not supported Win2000 Server since July 2010. Splunk does not write or support software for obsolete operating systems...

Re: W2K Universal Forwarder

hall_ronald — Fri, 20 Dec 2013 15:12:33 GMT

I disagree ...

"Splunk provides previous releases for customers that need access to a specific version. These versions are fully supported for customer's with a current enterprise license and support agreement." -- http://www.splunk.com/page/previous_releases

Support for Win2000 may not be available, but there are other 'previous releases'that may be a better fit for 'obsolete' hosts.

Re: W2K Universal Forwarder

hall_ronald — Fri, 20 Dec 2013 15:23:56 GMT

This question was better directed toward Customer Support (CS) and The Community should have suggested as much. Given that Win2000 OS is not supported, CS is in a better position to make a 'best fit' recommendation.

Discussion:

There is a persistent characteristic in the IT industry, that many companies continue to use 'unsupported' hardware and software long after the product owner, some by choice and some through insolvency, discontinues meaningful support. Industry can be found using systems that were provisioned as far back as the mid-80's. There is also the secondary marketplace for core infrastructure and specialized technologies where 'obsolete' is all that is available for entry-level entities and those operating on a tight margin. The CompTIA A+ Certification reflects the persistence of 'obsolete' technology.

If Splunk indeed refuses to, "...write or support software for obsolete operating systems..." then they risk neglecting a significant, though not necessarily majority portion of the 'big data' market place.