Forwarder for Linux ARM (Raspberry Pi): Will Splunk deprecate this add-on and/or update it with a mention of the regular ARM forwarder build?

[frankwayne]

It looks like there is now a regular ARM version of the UF (Universal Forwarder). It's confusing to have this old add-on, Forwarder for Linux ARM (Raspberry Pi), and a regularly updated UF build, especially since there's no mention here of the ARM version in the regular UF channel. Will this add-on be removed from Splunkbase now?

[Lowell · Accepted solution]

+1 Yes, this is confusing. Please remove the app, or at least provide a link to the UF download page and tell people to download the Linux "ARMv6" tgz package at this link: https://www.splunk.com/en_us/download/universal-forwarder.html#tabs/linux

[pbalsley]

I've been waiting for this app to be updated for Pi v3. Though always wondered why it was an app and not part of the normal Splunk UF downloads.

So are you saying that I can simply download the ARM linux UF from splunk and use it? I'm going to go give it a shot.

[pbalsley]

So to answer my own question. yes the ARM UF works just fine on the Raspberry Pi ver 3 model B.