Getting Data In
Highlighted

SplunkForwarder and SplunkLightForwarder Apps - Can they be removed?

Path Finder

Our Splunk installations have installed apps named SplunkForwarder and SplunkLightForwarder. The apps are disabled, and no users have write or read permissions. What are their purpose? Do you have any advice whether they can/should they be removed? Thanks!

SplunkForwarder SplunkForwarder
Yes
No
App | Permissions Disabled | Enable
SplunkLightForwarder SplunkLightForwarder
Yes
No
App | Permissions Disabled | Enable

Tags (1)
0 Karma
Highlighted

Re: SplunkForwarder and SplunkLightForwarder Apps - Can they be removed?

SplunkTrust
SplunkTrust

SplunkForwarder = heavy forwarder

0 Karma
Highlighted

Re: SplunkForwarder and SplunkLightForwarder Apps - Can they be removed?

Legend

If you don't have any plans on making forwarders out of these Splunk instances, you can safely delete these apps, as all they do is provide ready-made settings for this functionality.

View solution in original post

Highlighted

Re: SplunkForwarder and SplunkLightForwarder Apps - Can they be removed?

Path Finder

Great, Thank you!

0 Karma
Highlighted

Re: SplunkForwarder and SplunkLightForwarder Apps - Can they be removed?

Splunk Employee
Splunk Employee

Remark, they will be reinstalled when you upgrade.

0 Karma