We are planning to upgrade our splunk instances and we are wondering if its necessary for the forwarders as well? if not, then when?
both are running in Splunk 7.0 and environment is distributed, clustered indexers.
Only if you need new features which don't exist in your current forwarder. Support sends the message that almost all older versions are supported.
There are different reason why you want to upgrade your forwarders