Getting Data In

Universal Fowarder support Apps

ngcgoon
Explorer

I haven't seen any conclusive documentation on this, however does the Universal forwarder support Apps like the Splunk for windows app? I want to monitor server health, last time you have to install the app on the server and on the indexer. I would be nice to have that app running with the universal forwarder even if it's command line configured else I will use the splunk light forwarder.

1 Solution

dwaddle
SplunkTrust
SplunkTrust

Universal forwarder can support a large percentage of Splunk Apps - but there will be some that won't work. Some apps may have python scripted inputs that may not work on universal forwarder, because it does not include the python runtime.

I know UF can support Splunk for *nix, and I assume Splunk for Windows works as well (but I'm not sure)

The vaguest (but most accurate) answer is "it depends on the app"

View solution in original post

sf-mike
Splunk Employee
Splunk Employee

If you have apps that use python, you can still use them. You'll just have to install python separately.

araitz
Splunk Employee
Splunk Employee

You will also need to make sure that the path to python is in Splunk's system path and that all the necessary modules (e.g. splunk, splunk.search, splunk.auth) are present.

0 Karma

dwaddle
SplunkTrust
SplunkTrust

Universal forwarder can support a large percentage of Splunk Apps - but there will be some that won't work. Some apps may have python scripted inputs that may not work on universal forwarder, because it does not include the python runtime.

I know UF can support Splunk for *nix, and I assume Splunk for Windows works as well (but I'm not sure)

The vaguest (but most accurate) answer is "it depends on the app"

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...