Hi,
I have a few HP UX version 11.00 servers that I need logs sent to Splunk. I have successfully installed the forwarder on HP UX 11.23, but I do not see a version for 11.00.
Can someone confirm? How else could I get logs into Splunk from this if this is the case?
Thanks for any help.
The older version of Splunk Universal forwarder might be supported. Check here (change the Version from top right corner dropdown)
http://docs.splunk.com/Documentation/Splunk/6.2.0/Installation/Systemrequirements
Doesn't look like its officially supported, only 11.23 and 11.31 See: http://docs.splunk.com/Documentation/Splunk/6.4.0/Installation/Systemrequirements , http://docs.splunk.com/Documentation/Splunk/6.4.0/Installation/InstallonHP-UX and http://www.splunk.com/page/previous_releases#parischpux
Your best bet is probably to use syslog to forward the logs to a host that can run the forwarder.
What do you exactly mean "use syslog"?
You can configure syslogd to send logs to a remote host, and then use a universal forwarder on the remote host to send the logs to your indexer.
There are a variety of guides out there - I'm not familiar with HPUX so you should probably get in touch with your sysadmins to set this up.