We have distributed Splunk set up already. I got a request to install splunk forwarder on one linux server. So can i download splunk forwarder from splunk site ?
If yes then is there any specific type of forwarder i need to download?
You can download the Splunk Universal forwarder using the link below, you need to use your login credentials before you download the package.
You can install it using the wget and download the package and untar the package. Later move it to the /opt folder on your server.
Please check for the system requirements before you download the package. You can check for the system requirement using the below link
Make sure you are using the equal version or the lower version of the indexer.
You can find the linux universal fowarder installer here :
Make sure your UF version is equal or lower to your indexer version. So for older UF versions you can find all that here:
Let me know if that helps.