Sophos Anti-Virus for Linux with Splunk - Splunk Community

Getting Data In

Has anybody installed Sophos Anti-Virus for Linux on the same machines as their Splunk Head and Splunk Indexer? If so, what are the gotchas?

Splunk recommends configuring your AV scanners to not scan $SPLUNK_HOME. See https://docs.splunk.com/Documentation/Splunk/8.0.6/ReleaseNotes/RunningSplunkalongsideWindowsantivir...

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Build a No-Code AI Agent at .conf26: Join the AI Agent Buildathon

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Tech Talk Recap From Chaos to Control: Scaling Splunk Cloud with Infrastructure as Code Managing apps in ...

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Why Universal Forwarders Should Not Be Used as Intermediate Forwarders A practical Splunk forwarding topology ...