Universal Forwarder

[kishorealla]

Does Universal Forwarder need JVM ? How can we monitor if a Forwarder goes down.

[richgalloway · Accepted solution]

The Universal Forwarder does not need JVM.

To monitor your forwarders, click Settings->Distributed Management Console. Then click Forwarders->Forwarders:Instance to view the status of your forwarders.

[kishorealla]

Thanks Rich !! How does it run on Windows or Linux? Or How does a sysadmin identify it on any OS?

[richgalloway]

There are versions for both Windows and Linux.
I don't understand your second question.

[kishorealla]

Mainly for a system admin to know how much CPU and Memory it is consuming. I know it is very less, but these are the questions coming from our Admin team.

[richgalloway]

The Universal Forwarder is not a Java app. It runs as a native binary.
See http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Theuniversalforwarder. Forwarders typically report performance data to Splunk so the admins can monitor CPU and memory use there.

[kishorealla]

For eg. in Windows, does it run as a java service? Similarly for Linux?