What are SE linux recommendations for splunk forwa...

kiranpanchavat1 · ‎03-13-2022

Can anyone advise the SE linux configurations for the Splunk universal forwarders ?

VatsalJagani · ‎03-15-2022

@kiranpanchavat1 - It seems like you can use a generic Splunk UF tgz file for installation. And for Splunk configuration, it would always be the same.

https://www.splunk.com/en_us/download/universal-forwarder.html?locale=en_us

Again unless you have any issues. If you are doing installation for the first time, I would suggest to try on one of the test machine.

richgalloway · ‎03-13-2022

What problem are you trying to solve?

---
If this reply helps you, Karma would be appreciated.

What are SE linux recommendations for splunk forwarder?

universal forwarder

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

A Four-Part Event Series: Full Stack Observability For the AI Era

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

Join the Conversation