Where can I get the most recent Splunkforwarder setup files for Linux i386?

[Kairaria]

Hello, we have a Splunk enterprise account setup on premises, and we have some hosts that are still running on the old 'i386' architecture. I recently had to refresh one, but I do not have the Splunk forwarder setup files for that environment.

How can I get the most recent 'Splunkforwarder' setup files for "Linux i386" architecture please?

Reaching out to support as directed on 'previous releases' download page has not gotten me anywhere 2 weeks down the line now.

[PickleRick]

1. Escalate the issue to your account manager if there is prolonged lack of reaction to your  case.

2. I don't think I recall seing i386 forwarder ever. Even if there was one, it would have to be really really old and might not be compatible with s2s protocol on modern splunk indexers.

3. Running i386 distro nowadays... seems a very strange idea anyway. Where did you even get one? How old software versions does it include? What about security updates?

[isoutamo]

If you have another system which are running i368 version of UF then just copy that forwarders directory. Then clean up fish bucket and fix conf files as needed. That should be enough to get running version. Old backups are also good place to get those files. You probably need one or more old HF between your UF and current indexers to get working connection between UF and IDX.

BUT as @PickleRick try to get rid of this kind of systems as those haven't any security fixes etc.