The Splunk App for Cisco UCS documentation indicates a light forwarder rather than a universal forwarder is required. Splunk version 6 deprecated the light forwarder. Is there can update to the app for version 6? If not, an the UCS app be used with Splunk v.6 environments?
Actually, this is just a bit of a documentation problem. I will update the readme to reflect how to deploy a light forwarder in version 6. I'm also working with our docs team to have a bit more guidance in the Splunk Enterprise release notes. This is still a supported feature that exists within the product, but it's been deprecated.
To deploy a light forwarder, follow the steps documented here: http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Deployaforwarder
Actually, this is just a bit of a documentation problem. I will update the readme to reflect how to deploy a light forwarder in version 6. I'm also working with our docs team to have a bit more guidance in the Splunk Enterprise release notes. This is still a supported feature that exists within the product, but it's been deprecated.
To deploy a light forwarder, follow the steps documented here: http://docs.splunk.com/Documentation/Splunk/6.0/Forwarding/Deployaforwarder
Deprecated features list in the release notes is updated with a link to that topic. Note that deprecated does not mean removed. The removed features list is below the deprecated features list.