Getting Data In

Universal Forwarder upgrade


Is the 6.0.2 Universal forwarder compatible with the 6.0.1 indexer?

In other words, are the latest universal forwarders compatible with older indexer versions?


0 Karma

0 Karma


Ahh, this line at the end says it all:

Note: As a best practice, it is recommended that indexers be at the same or higher version level than the forwarders they're receiving data from.

This means that we should upgrade the indexer too.

thanks for the help!

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!