Installation

Difference between Splunk app and splunk add-on and universal forwarder?

gsrikanth87
Path Finder

As per my understanding we install Splunk app on serverside, Splunk universal forwarder is client-side, then what is a Splunk add-on?

Labels (3)
1 Solution

kml_uvce
Builder

yes , if your definition of client and server side like this
client side is your source of data/system
serverside is your indexer

View solution in original post

kml_uvce
Builder

yes , if your definition of client and server side like this
client side is your source of data/system
serverside is your indexer

gsrikanth87
Path Finder

oh, Thank you. Do we have any video link for splunk configuration for unix/linux servers monitoring?

0 Karma

kml_uvce
Builder

universal forwarder : it is used to send data from source to indexer
Splunk app: you need to install in indexer or search head and shows you report, visualization
splunk addon:you need to install splunk add-on in forwarder and addon extract the data from source (example run scripts in unix addon) v and send to indexer via forwarder

0 Karma

gsrikanth87
Path Finder

Thank you.. But I want to understand that where we install splunk app and splunk fowarder?

splunk app - server side
splunk universal forwarder- client side with addon

Is this correct?

0 Karma
Get Updates on the Splunk Community!

.conf25 Registration is OPEN!

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...

Detecting Cross-Channel Fraud with Splunk

This article is the final installment in our three-part series exploring fraud detection techniques using ...

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...