Getting Data In

Minimum Disk Space needed to Install Universal Forwarder on Windows

mfeeny1
Path Finder

Hello. I am writing a script to install the Universal Forwarder on a set of Windows servers. The script will check for adequate disk space before proceeding with the install.

What should I use as the minimum disk space required?

Thx,

mfeeny1

0 Karma

mfeeny1
Path Finder

kdenton, thanx for the pointer! I had looked in Deployment Manual, where Universal Forwarder installation is described, but didn't find it there.

Incidentally, the doc you reference actually says "512MB" for Universal Forwarder (2GB for "full" Splunk).

But, I will probably go with 2GB. I believe all our servers will have 2GB free at a very bare minimum.

Thx again.

mfeeny1

0 Karma

kdenton
Path Finder

From personal experience I ran the Universal Forwarder on several hundred web servers and my OS partition was only 20GB with about 10 GB free disk and everything was fine. Splunk recommends a min of 2GB free.

See this link:
http://docs.splunk.com/Documentation/Splunk/latest/Installation/System requirements

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Optimize AI at Scale: Must-Attend Observability Sessions at .conf26

conf26   With nearly 70 breakout sessions on the docket, the .conf26 Observability track is designed to help ...

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...