can i install heavy forwarder on my windows server ?

[itishree123]

to integrate my mcafee with splunk ,sould i need to install heavy forward on my windows server

[richgalloway]

Can you install a heavy forwarder on your Windows server? Yes.

Do you need to? It depends.

What McAfee product are you trying to integrate?
If you just need to send logs to Splunk then a universal forwarder is better to use than a heavy forwarder.
For some McAfee products (like EPO), you need to use DB Connect to read data from a database. That requires a heavy forwarder.

[gcusello]

hi @itishree123
Could you better describe your need?

• what do you mean with "to integrate my mcafee with splunk ,sould i need to install heavy forward on my windows server"?
• do you wanto to send mcafee logs to a Splunk Enterprise?
• why do you speak of heavy Forwarder?

Ciao.
Giuseppe