Is it expected behavior for 6.4.1 universal forwarders to work with 6.3.3 indexers?

[daniel333]

All,

We accidentally rolled out dozens of 6.4.1 Universal Forwarders, but we have 6.3.3 indexers. To my surprise, it worked! No errors. Is this expected behavior? It's a lot of effort to downgrade our UFs, so if I am supported in this setting, I'd like to leave it.

[_d_]

You're good: https://docs.splunk.com/Documentation/Forwarder/6.4.1/Forwarder/Compatibilitybetweenforwardersandind...