All Apps and Add-ons

Splunk App for Windows Infrastructure: How many Splunk forwarders are required to monitor 200 Windows servers?

sonia_splunk
New Member

Hello Everyone,

I have installed app Splunk for Windows Infrastructure.

I am going to set up around 200 Windows servers in Splunk for Infra monitoring.

How many forwarders are required for 200 Windows servers?

Thanks

Sonia

0 Karma
1 Solution

javiergn
SplunkTrust
SplunkTrust

Short answer: 200
Install 1 universal forwarder on every host you want to monitor.

You can also monitor Windows servers remotely using WMI or Event Log Forwarding but it won't be as reliable and flexible as having your dedicated UF running locally.

Hope that helps.

Thanks,
J

View solution in original post

0 Karma

javiergn
SplunkTrust
SplunkTrust

Short answer: 200
Install 1 universal forwarder on every host you want to monitor.

You can also monitor Windows servers remotely using WMI or Event Log Forwarding but it won't be as reliable and flexible as having your dedicated UF running locally.

Hope that helps.

Thanks,
J

0 Karma

sonia_splunk
New Member

Thanks for your reply J !!!!
How universal forwarder works?
Which port number it uses?
Is this similar to agent in other monitoring tool?
Suppose, If Universal forwarder is stooped working, then will it stop sending data to Indexer?
Thanks
Sonia

0 Karma
Get Updates on the Splunk Community!

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Admin Console: A Single, Unified Interface for All Your Cloud Admin Needs

WATCH NOWJoin us to learn how the admin console can save you time and give you more control over the Splunk® ...