Splunk Add-On for Sophos Mac Compatibility

[pc1]

Is the Splunk Add-On for Sophos compatible with getting data from my Macs? I have a deployment server (on Windows, the only OS compatible with hosting the Sophos Add-On) with Macs and Windows machines in my environment w/ the Universal Forwarder installed. I want to use this add-on to collect Sophos data from both my macs and windows machines but can't find anywhere if it will work. 

[venkatasri · Accepted solution]

Hi @pc1 

It supports only on Windows as per docs no MAC. You shall be able to deploy only to Windows UF from DS by blacklisting mac UF's. support. https://docs.splunk.com/Documentation/AddOns/released/Sophos/Hardwareandsoftwarerequirements

---

an upvote would be appreciated if this reply helps!