Getting Data In

After enabling Universal Forwarder in Splunk 4.2, and restarting, it crashed?

rsimmons
Splunk Employee
Splunk Employee

When I enable Universal Forwarder in core Splunk 4.2, after restart, it crashed.

Tags (1)
1 Solution

zliu
Splunk Employee
Splunk Employee

For some reason, Splunk 4.2 shipped with Universal Forwarder app. This app should not be included with the core Splunk 4.2.

Please uninstall 4.2 and install it again. If you want to have Universal Forwarder, please download it and install it separately. This is an Known Issue in 4.2. SPL-39200

View solution in original post

zliu
Splunk Employee
Splunk Employee

For some reason, Splunk 4.2 shipped with Universal Forwarder app. This app should not be included with the core Splunk 4.2.

Please uninstall 4.2 and install it again. If you want to have Universal Forwarder, please download it and install it separately. This is an Known Issue in 4.2. SPL-39200

Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...