https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Cloud-Hybrid-Infrastructure/m-p/690667#M12008 <P>Strictly speaking, none of it is necessary, but it does make it easier to get data into Splunk.&nbsp; <span class="lia-unicode-emoji" title=":grinning_face_with_big_eyes:">😃</span></P><P>You already use the UF and HF so you must have found them necessary for doing certain things.&nbsp; There may be other ways to do those things, but don't fix what isn't broken.</P><P>The Deployment Server is there to help manage your UFs.&nbsp; Without a DS, you have manage each UF separately and manually (unless you have automation to help).</P><P>For more about the DS and what is does, see&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Aboutdeploymentserver#What_is_deployment_server.3F" target="_blank">https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Aboutdeploymentserver#What_is_deployment_server.3F</A> .&nbsp; The system requirements are at <A href="https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Planadeployment#Deployment_server_system_requirements" target="_blank">https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Planadeployment#Deployment_server_system_requirements</A></P><P>System requirements for UFs are at <A href="https://docs.splunk.com/Documentation/Forwarder/9.2.1/Forwarder/Deploy" target="_blank">https://docs.splunk.com/Documentation/Forwarder/9.2.1/Forwarder/Deploy</A></P> Fri, 14 Jun 2024 01:22:18 GMT richgalloway 2024-06-14T01:22:18Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Cloud-Hybrid-Infrastructure/m-p/690657#M12007 <P>So I have Splunk Cloud, but we still use a Heavy Forwarder, Universal Forwarder and a Deployment server. The UF server has definitely come into hand for grabbing local data. However, I'm not sure what the Deployment server is for. We do use the Heavy Forwarder for various things.&nbsp;</P><P>Does anyone have documentation of what is necessary and what is a nicety? And do they have knowledge on the specs needed?&nbsp;</P> Thu, 13 Jun 2024 19:18:24 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Cloud-Hybrid-Infrastructure/m-p/690657#M12007 kruane 2024-06-13T19:18:24Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Cloud-Hybrid-Infrastructure/m-p/690667#M12008 <P>Strictly speaking, none of it is necessary, but it does make it easier to get data into Splunk.&nbsp; <span class="lia-unicode-emoji" title=":grinning_face_with_big_eyes:">😃</span></P><P>You already use the UF and HF so you must have found them necessary for doing certain things.&nbsp; There may be other ways to do those things, but don't fix what isn't broken.</P><P>The Deployment Server is there to help manage your UFs.&nbsp; Without a DS, you have manage each UF separately and manually (unless you have automation to help).</P><P>For more about the DS and what is does, see&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Aboutdeploymentserver#What_is_deployment_server.3F" target="_blank">https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Aboutdeploymentserver#What_is_deployment_server.3F</A> .&nbsp; The system requirements are at <A href="https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Planadeployment#Deployment_server_system_requirements" target="_blank">https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Planadeployment#Deployment_server_system_requirements</A></P><P>System requirements for UFs are at <A href="https://docs.splunk.com/Documentation/Forwarder/9.2.1/Forwarder/Deploy" target="_blank">https://docs.splunk.com/Documentation/Forwarder/9.2.1/Forwarder/Deploy</A></P> Fri, 14 Jun 2024 01:22:18 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-Cloud-Hybrid-Infrastructure/m-p/690667#M12008 richgalloway 2024-06-14T01:22:18Z