https://community.splunk.com/t5/Getting-Data-In/Splunk-Indexer-and-Universal-Forwarder-version-compatibility/m-p/242614#M47032 <P>No. This is spelled out in the docs: <A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Compatibilitybetweenforwardersandindexers">http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Compatibilitybetweenforwardersandindexers</A></P> <UL> <LI>A forwarder that runs version 6.x can send data to indexers that run version 5.0.x and later.</LI> <LI>An indexer that runs version 6.x can accept data from forwarders that run version 4.3.x and later.</LI> </UL> Wed, 16 Mar 2016 06:26:47 GMT acharlieh 2016-03-16T06:26:47Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Indexer-and-Universal-Forwarder-version-compatibility/m-p/242613#M47031 <P>I noticed that Splunk official suggested us to keep the Indexer and UF using the same version (I am using 6.2.3). However, due to some issue, I need to upgrade the UF to 6.2.6 or 6.3. So doing, any compatibility issue will be introduced?</P> Wed, 16 Mar 2016 02:43:40 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Indexer-and-Universal-Forwarder-version-compatibility/m-p/242613#M47031 charlescywong 2016-03-16T02:43:40Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Indexer-and-Universal-Forwarder-version-compatibility/m-p/242614#M47032 <P>No. This is spelled out in the docs: <A href="http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Compatibilitybetweenforwardersandindexers">http://docs.splunk.com/Documentation/Splunk/6.3.3/Forwarding/Compatibilitybetweenforwardersandindexers</A></P> <UL> <LI>A forwarder that runs version 6.x can send data to indexers that run version 5.0.x and later.</LI> <LI>An indexer that runs version 6.x can accept data from forwarders that run version 4.3.x and later.</LI> </UL> Wed, 16 Mar 2016 06:26:47 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Indexer-and-Universal-Forwarder-version-compatibility/m-p/242614#M47032 acharlieh 2016-03-16T06:26:47Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Indexer-and-Universal-Forwarder-version-compatibility/m-p/242615#M47033 <P>Thanks Acharlieh !! </P> Wed, 16 Mar 2016 06:44:40 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Indexer-and-Universal-Forwarder-version-compatibility/m-p/242615#M47033 charlescywong 2016-03-16T06:44:40Z