Getting Data In

can i install heavy forwarder on my windows server ?

itishree123
New Member

to integrate my mcafee with splunk ,sould i need to install heavy forward on my windows server

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Can you install a heavy forwarder on your Windows server? Yes.

Do you need to? It depends.

What McAfee product are you trying to integrate?
If you just need to send logs to Splunk then a universal forwarder is better to use than a heavy forwarder.
For some McAfee products (like EPO), you need to use DB Connect to read data from a database. That requires a heavy forwarder.

---
If this reply helps you, Karma would be appreciated.
0 Karma

gcusello
Esteemed Legend

hi @itishree123
Could you better describe your need?

  • what do you mean with "to integrate my mcafee with splunk ,sould i need to install heavy forward on my windows server"?
  • do you wanto to send mcafee logs to a Splunk Enterprise?
  • why do you speak of heavy Forwarder?

Ciao.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...