Universal forwarder with splunk indexer 4.1.7 - will it work?

[rasingh]

Can I use the universal forwarder 4.2 to send data to an indexer running Splunk 4.1.7 (or older) ?

[dwaddle · Accepted solution]

Yes, see docs at http://www.splunk.com/base/Documentation/latest/Deploy/Deploymentoverview.

The universal forwarder is backwards compatible with older Splunk indexers. You can forward data to any Splunk indexers, version 3.4.14 or above.