Hello,
Is there a place where we can see the universal forwarder 6.3.3 release notes?
I already checked Release Notes But I think thats more for the splunk server.
I am looking for the advantages of upgrading from universal forwarder 6.2.1 to 6.3.3.
Thanks,
Simon Mandy
Hello,
If splunk suffers from anything its an overabundance of documentation.... everywhere. On each page of the release notes there is a "Changelog" section on the left side of the page and on that a subsection called "Distributed deployment, forwarder and deployment server issues" which should have what you're looking for. Here's what I could find:
Release Notes for the current version: http://docs.splunk.com/Documentation/Splunk/6.3.3/ReleaseNotes/MeetSplunk
Release notes for all version (except the current one): https://www.splunk.com/page/previous_releases/universalforwarder Then select your forwarder OS type.
Hello,
If splunk suffers from anything its an overabundance of documentation.... everywhere. On each page of the release notes there is a "Changelog" section on the left side of the page and on that a subsection called "Distributed deployment, forwarder and deployment server issues" which should have what you're looking for. Here's what I could find:
Release Notes for the current version: http://docs.splunk.com/Documentation/Splunk/6.3.3/ReleaseNotes/MeetSplunk
Release notes for all version (except the current one): https://www.splunk.com/page/previous_releases/universalforwarder Then select your forwarder OS type.
Great answer! Also, I believe 6.3 introduced the http event collector and the parallelization. That means the UF can be configured to collect HTTP events. Parallelization means the UF can increase its pipelines (rather than 1) and act as if there were two UF installed thereby increasing performance (while using more available resources).