Hello friends!
i hope you guys can help me. I have installed UF on windows server but i need to know the following:
Is the installation per session? What happens if the user who made the installation is removed? Will it be necessary to have a dedicated user?
Thank for your help
This is a tricky decision and Splunk has docs for it: https://docs.splunk.com/Documentation/Splunk/latest/Installation/ChoosetheuserSplunkshouldrunas
The forwarder is not installed under a user's account. It's available to all users and should remain so if the installing user is removed.
