Splunk Enter vs Universal Forward capabilities

[arungoy]

Hi, 

Currently, we are running with Splunk Enterprises and Universal Forwarder with 9.0 Version but now we need to upgrade it to latest version. 

Is it possible if the versions for Splunk Enterprises & UF could be different like Splunk Enterprises on 9.1 and UF on 9.0? or both should be on same version?

From 9.0 version, should we go with 9.1 or 9.2 version? 

Thanks in advance for your kind advice and guidance on it.

-AK

[gcusello · Accepted solution]

Hi @arungoy,

yes Universla Forwarder 9.0 is fully compatible with Splunk Enterprise 9.2, as you can read at https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/Compatibilitybetweenforwar...

Ciao.

Giuseppe