Splunk Enterprise

Splunk Enter vs Universal Forward capabilities

arungoy
Engager

Hi, 

Currently, we are running with Splunk Enterprises and Universal Forwarder with 9.0 Version but now we need to upgrade it to latest version. 

Is it possible if the versions for Splunk Enterprises & UF could be different like Splunk Enterprises on 9.1 and UF on 9.0? or both should be on same version?

From 9.0 version, should we go with 9.1 or 9.2 version? 

Thanks in advance for your kind advice and guidance on it.

-AK

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @arungoy,

yes Universla Forwarder 9.0 is fully compatible with Splunk Enterprise 9.2, as you can read at https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/Compatibilitybetweenforwar...

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @arungoy,

yes Universla Forwarder 9.0 is fully compatible with Splunk Enterprise 9.2, as you can read at https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/Compatibilitybetweenforwar...

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...

Enterprise Security Content Update (ESCU) | New Releases

In March, the Splunk Threat Research Team had 2 releases of security content via the Enterprise Security ...

Join the Splunk Developer Program Hackathon: Splunk Build-a-thon!

The Splunk Developer Program is launching in beta, and we’re celebrating with an exciting hackathon! This is ...