All Apps and Add-ons
Highlighted

Splunk App for Windows Infrastructure: How many Splunk forwarders are required to monitor 200 Windows servers?

New Member

Hello Everyone,

I have installed app Splunk for Windows Infrastructure.

I am going to set up around 200 Windows servers in Splunk for Infra monitoring.

How many forwarders are required for 200 Windows servers?

Thanks

Sonia

0 Karma
Highlighted

Re: Splunk App for Windows Infrastructure: How many Splunk forwarders are required to monitor 200 Windows servers?

SplunkTrust
SplunkTrust

Short answer: 200
Install 1 universal forwarder on every host you want to monitor.

You can also monitor Windows servers remotely using WMI or Event Log Forwarding but it won't be as reliable and flexible as having your dedicated UF running locally.

Hope that helps.

Thanks,
J

View solution in original post

0 Karma
Highlighted

Re: Splunk App for Windows Infrastructure: How many Splunk forwarders are required to monitor 200 Windows servers?

New Member

Thanks for your reply J !!!!
How universal forwarder works?
Which port number it uses?
Is this similar to agent in other monitoring tool?
Suppose, If Universal forwarder is stooped working, then will it stop sending data to Indexer?
Thanks
Sonia

0 Karma
Highlighted

Re: Splunk App for Windows Infrastructure: How many Splunk forwarders are required to monitor 200 Windows servers?

SplunkTrust
SplunkTrust
0 Karma