Windows installer on Splunk 6.4.x universal forwarders installed the Splunk Add-on for Microsoft Windows 4.8.0. Was this feature removed in 6.5.0?

[nk-1]

The Windows installer in the 6.4 Universal Forwarder installed the Splunk Add-on for Microsoft Windows 4.8.0.
Was that feature removed in the 6.5 Universal Forwarder?

[gjanders · Accepted solution]

That option is available if you click "Customise options" while running the installer on windows.

What I have found to be better practice in my opinion is to install nothing besides the universal forwarder and point this to a deployment server, then let the deployment server send over the current Splunk_TA_windows.

By using the deployment server you can then remotely update the Splunk_TA_windows and update multiple servers to include new log sources or similar (or just a single server if you prefer).