topic Re: Is there a Splunk Universal Forwarder version for HP-UX 11.00? in Getting Data In

Is there a Splunk Universal Forwarder version for HP-UX 11.00?

mmensch — Mon, 02 May 2016 14:48:48 GMT

Hi,

I have a few HP UX version 11.00 servers that I need logs sent to Splunk. I have successfully installed the forwarder on HP UX 11.23, but I do not see a version for 11.00.

Can someone confirm? How else could I get logs into Splunk from this if this is the case?

Thanks for any help.

Re: Is there a Splunk Universal Forwarder version for HP-UX 11.00?

jplumsdaine22 — Tue, 03 May 2016 10:33:14 GMT

Doesn't look like its officially supported, only 11.23 and 11.31 See: http://docs.splunk.com/Documentation/Splunk/6.4.0/Installation/Systemrequirements , http://docs.splunk.com/Documentation/Splunk/6.4.0/Installation/InstallonHP-UX and http://www.splunk.com/page/previous_releases#parischpux

Your best bet is probably to use syslog to forward the logs to a host that can run the forwarder.

Re: Is there a Splunk Universal Forwarder version for HP-UX 11.00?

mmensch — Mon, 09 May 2016 18:45:07 GMT

What do you exactly mean "use syslog"?

Re: Is there a Splunk Universal Forwarder version for HP-UX 11.00?

somesoni2 — Mon, 09 May 2016 18:52:35 GMT

The older version of Splunk Universal forwarder might be supported. Check here (change the Version from top right corner dropdown)

http://docs.splunk.com/Documentation/Splunk/6.2.0/Installation/Systemrequirements

Re: Is there a Splunk Universal Forwarder version for HP-UX 11.00?

jplumsdaine22 — Tue, 10 May 2016 08:40:39 GMT

You can configure syslogd to send logs to a remote host, and then use a universal forwarder on the remote host to send the logs to your indexer.

There are a variety of guides out there - I'm not familiar with HPUX so you should probably get in touch with your sysadmins to set this up.