Splunk Forwarder Connectivity from 6.x(UF) to 7.x(HF) to 8.x(IDX) possible?

[rajyah]

Hi,

I have asked this question since we have forwarders that, for some reason, will not be able to upgrade to Win10 or OS that accomodates 7.x onwards.

Is it possible to receive the events, possibly a csv file, from 6.x going through 7.x to 8.x IDX? If yes, what are the possible implications from it?

Thank you.

[isoutamo]

Hi

here is the compatibility matrix for fwd vs IDX https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/Compatibilitybetweenforwar...
Based on it (officially) 7.x is first supported version of UF.