I am running Splunk 7.32 preparing to upgrade to Splunk 8.1.1 so I know I need to upgrade my forwarder's, before moving to Splunk 8 for compatibility. When I go to download the Universal Forwarder for my 2012 servers it only shows 7.3.8 as one compatible with 2012. So does that mean Splunk version 8 does not fully support Windows server 2012?
Thanks for any assistance.
Correct, Splunk no longer supports Win2012. You can, however, use older versions of the UF with Splunk 8 indexers. See https://docs.splunk.com/Documentation/Forwarder/8.1.1/Forwarder/Compatibilitybetweenforwardersandind...
So using the 7.x forwarder with the 8.x Indexer I will still have Events and Metrics which will allow me more time for my 2012 upgrades. Thanks so much for your help.
Correct, Splunk no longer supports Win2012. You can, however, use older versions of the UF with Splunk 8 indexers. See https://docs.splunk.com/Documentation/Forwarder/8.1.1/Forwarder/Compatibilitybetweenforwardersandind...