Getting Data In

Universal Forwarder on Chromebooks?

jpetrakovic
Explorer

Hi all, long time lurker here!

Has anyone had any luck installing a universal forwarder on a Chromebook? My company will most likely be purchasing some of these, and I'd like to be able to monitor them if possible.

I know Chrome OS isn't listed as a supported operating system, but it is Linux-based so I'm not sure if there are workarounds (we're a Windows-only shop so I don't have much experience in that area).

Thanks!

0 Karma

xpac
SplunkTrust
SplunkTrust

The only information I could find on this is in this question/answer:
https://answers.splunk.com/answers/225758/splunk-on-chromebook.html

Be aware that that question relates to Splunk Enterprise, so the concers about too little ressources do not apply. What I take from that post is that it's basically possible, because Splunk has no dependencies, and just "works" after unpacking it. You might however run into permission issues, or logs being in different locations, so you might have to adapt your inputs, but it should work.

Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. 🙂

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data ...

Meet Splunk Observability Studio: AI-Assisted OpenTelemetry Instrumentation Without ...

Instrumentation is usually the last step or even an afterthought when building out a project. The feature ...

Federated Search for Cisco Security and Analytics Logging (SAL) is now GA on Splunk ...

Federated Search for Cisco  Security Analytics and Logging (SAL) is now generally available as part of the ...