Getting Data In

Universal Forwarder on Windows 2012 R2 Server Core

jmp13
Explorer

Can the forwarder be installed on server core edition of Windows? Is thee any issues?

jbernt_splunk
Splunk Employee
Splunk Employee

Yes, the Splunk Universal Forwarder can be run on Windows Core editions up through Windows Server 2012. We are still working on certification on Windows Server 2012 R2 though. Early 2014 timeframe.

glancaster
Path Finder

We run it without issue. Be sure to make note if you need any PS scripts to run as it isn't pre-installed IIRC.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...