Forwarder 6.4.1 with Server 6.2.1

[kalianov]

Hi guys!
I have two questions:
1) Is it possible to use Forvarder ver 6.4.1
if my indexer and deployment servers have Splunk Entervrise ver 6.2.1
2) Which instalation of Splunk forwarder I can use for

Red Hat Enterprise Linux Server release 7.0 core 3.10.0-123.6.3.el7.x86_64

[nzambo_splunk]

1 - Short answer - yes.
http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Compatibilitybetweenforwardersandindex...

2 -The current forwarder rpm or tar (6.4.1). Just note that there's a 64bit, 32bit, and s390x sections, just be sure to grab the 64bit version
https://www.splunk.com/en_us/download/universal-forwarder.html

[kalianov]

thanks a lot

[gpareesi11 · Accepted solution]

Hi,

1 question, this should not be a problem regarding this link:
http://docs.splunk.com/Documentation/Splunk/6.1.4/Forwarding/Compatibilitybetweenforwardersandindexe...
Use Splunkbase to check App-Specific compatibility restriction.

2 question, use this link, this should help you:
http://docs.splunk.com/Documentation/Forwarder/latest/Forwarder/Installanixuniversalforwarder

[kalianov]

thanks a lot