All Apps and Add-ons

Windows installer on Splunk 6.4.x universal forwarders installed the Splunk Add-on for Microsoft Windows 4.8.0. Was this feature removed in 6.5.0?

nk-1
Path Finder

The Windows installer in the 6.4 Universal Forwarder installed the Splunk Add-on for Microsoft Windows 4.8.0.
Was that feature removed in the 6.5 Universal Forwarder?

0 Karma
1 Solution

gjanders
SplunkTrust
SplunkTrust

That option is available if you click "Customise options" while running the installer on windows.

What I have found to be better practice in my opinion is to install nothing besides the universal forwarder and point this to a deployment server, then let the deployment server send over the current Splunk_TA_windows.

By using the deployment server you can then remotely update the Splunk_TA_windows and update multiple servers to include new log sources or similar (or just a single server if you prefer).

View solution in original post

gjanders
SplunkTrust
SplunkTrust

That option is available if you click "Customise options" while running the installer on windows.

What I have found to be better practice in my opinion is to install nothing besides the universal forwarder and point this to a deployment server, then let the deployment server send over the current Splunk_TA_windows.

By using the deployment server you can then remotely update the Splunk_TA_windows and update multiple servers to include new log sources or similar (or just a single server if you prefer).

Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...