Splunk Universal Forwarder

Splunk Universal Forwarder is a lightweight agent that streams data from a host to a receiver, usually a Splunk platform index. It monitors data in real time, tags it with source, source type, and host metadata, and supports buffering, compression, and SSL. On Windows, it can collect event logs, performance counters, and registry changes. It has no user interface, which helps minimize resource use.

Supported Operating Systems

• Windows
• Linux

Supported Versions

• Splunk Universal Forwarder

Keep Splunk Universal Forwarder updated with Automox.

Tired of using multiple tools to patch your systems? Patch them all, automatically, from a single platform.

How it works

Ready to untangle third-party patching?

Automate your patching in minutes with a free trial.