universal forwarder

[bwenge]

I have already installed full splunk on my server1.I want that server1 send data to another splunk server2.Can I install universal forwarder on server1 in order to send data to server2.To install universal forwarder over an existing installation of full splunk is it or can be a problem?

[Steve_G_]

You can install the universal forwarder on a machine which already has an instance of full Splunk. However, it will not install over the full Splunk instance. Instead, they will exist side-by-side.

[bwenge]

Thanks, the universal forwarder is working properly on a machine which already has an instance of full Splunk

[ftk]

The Universal Forwarder is actually a separate binary with a separate installer. I have not done it personally, but I do not see a reason why installing both of these would not be possible.

Another method would be to set up the current full splunk instance to forward to your other instance.