Getting Data In

Universal forwarder deprecated for Windows 2008 on Splunk 7.0.0?

pfabrizi
Path Finder

we are in the process of rolling SPLUNK to production very soon and we going with SPLUNK Enterprise 6.6.3 as we stood up some of the infrastructure before 7.0 release. Looking at the deprecated features support for Windows 2008 is removed.

What is the alternative?

Our process for deploying to endpoints has 45 day lead times, so a January deployment had a mid October deadline for submission. This is why we went with 6.6.2 UF.

Windows 8 x86_64: Enterprise and Free/Trial support is removed. Universal Forwarder support is deprecated and might be removed entirely in a future release.

• Windows 8 x86_32: All support (Enterprise, Free/Trial, and Universal Forwarder) is removed.

• Windows Server 2008 R2 SP1 x86_64: Enterprise and Free/Trial support is removed. Universal Forwarder support is deprecated and might be removed entirely in a future release.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Use an older version of the Universal Forwarder that is supported on your platform. It is not necessary for the UF version to match the Splunk Enterprise version.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Use an older version of the Universal Forwarder that is supported on your platform. It is not necessary for the UF version to match the Splunk Enterprise version.

---
If this reply helps you, Karma would be appreciated.

pfabrizi
Path Finder

so I can continue to use the 6.6.2 UF on my windows 2008 r1 and r2 servers even though release notes for SPLUNK 7.0 indicate support is removed?

0 Karma

helge
Builder

Yes, that should not be a problem.

0 Karma

pfabrizi
Path Finder

Thank You!

Get Updates on the Splunk Community!

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Want a chance to win $500 to the Splunk shop? Take our IT Incident Management Survey!

  Top Trends & Best Practices in Incident ManagementSplunk is partnering up with Constellation Research to ...