https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285396#M54511 <P><STRONG>Rock On!</STRONG> This is the exact question I was searching for today and the answer is spot on. </P> <P>Thank you @pyro_wood and @somesoni2. Ya'll made my day.</P> Thu, 08 Sep 2016 08:35:15 GMT tred23 2016-09-08T08:35:15Z https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285393#M54508 <P>Hi there, </P> <P>I would like to know if it's possible to have Splunk instances running on linux and windows in the same environment.</P> <P>We currently have an environment which runs splunk on x86 linux centOS virtual machines.<BR /> My company decided to monitor Active Directory security events with splunk.</P> <P>According to this documentation: <A href="http://docs.splunk.com/Documentation/Splunk/6.2.9/Data/AuditActiveDirectory">http://docs.splunk.com/Documentation/Splunk/6.2.9/Data/AuditActiveDirectory</A><BR /> I need to run splunk on windows to monitor active directory systems.</P> <HR /> <P><STRONG>1. Am I able to just install another indexer on windows and add this one to the existing linux environment?<BR /> 2. Will this work together?<BR /> 3. Can this indexer share the licence pool of the existing splunk linux environment?<BR /> 4. Can I forward data from the windows indexer to the linux indexers?</STRONG></P> <P>Kind regards,<BR /> pyro_wood</P> Wed, 01 Jun 2016 15:52:03 GMT https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285393#M54508 horsefez 2016-06-01T15:52:03Z https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285394#M54509 <P>Ans1. You just need a Heavy forwarder installed on Windows to monitor AD and that HF can send data to your existing Linux Indexer(s).<BR /> Ans2. Yes, it'll<BR /> Ans3. it's a HF so it has to share the same license pool, and yes it can<BR /> Ans4. As mentioned earlier, you need a Heavy forwarder and it'll forwarder the data to your linux indexers.</P> Wed, 01 Jun 2016 16:17:44 GMT https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285394#M54509 somesoni2 2016-06-01T16:17:44Z https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285395#M54510 <P>Perfect, thank you very much <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 02 Jun 2016 06:59:46 GMT https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285395#M54510 horsefez 2016-06-02T06:59:46Z https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285396#M54511 <P><STRONG>Rock On!</STRONG> This is the exact question I was searching for today and the answer is spot on. </P> <P>Thank you @pyro_wood and @somesoni2. Ya'll made my day.</P> Thu, 08 Sep 2016 08:35:15 GMT https://community.splunk.com/t5/Getting-Data-In/Possible-to-run-Splunk-on-Windows-and-Linux-in-the-same/m-p/285396#M54511 tred23 2016-09-08T08:35:15Z