- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Has there been a change with indexer and universal forwarder compatibility?
asherinb
Explorer
08-12-2014
12:24 AM
Earlier the Splunk docs read 6.0 indexers are backwards compatible with forwarders down to 4.x but now it says 6.0 indexers are backwards compatible with forwarders down to 5.x , is this a new change?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
gkanapathy

Splunk Employee
08-13-2014
06:49 PM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
gkanapathy

Splunk Employee
08-13-2014
06:48 PM
No, they will continue to work in practice, but 4.x is no longer supported by Splunk, so there will be no fixes or help with problems, other than to suggest upgrading the forwarder. (In fact you can probably use 3.x forwarders to send to 6.1, but again, those forwarders are no longer supported.)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

ppablo
Retired
08-13-2014
05:33 PM
Hi @asherinb
Can you post the documentation links you're referring to that shows conflicting information?
