All Apps and Add-ons

Which OS to use for installing stream forwarder?

simon21
Path Finder

We plan to use stream forwarders to use the stream app. As per the documentation, linux OS is recommended to be used for installing the stream forwarders but can I use a windows OS as well? Can we install stream forwarder on a windows box? or is there some restriction to that?

Please help

0 Karma

simon21
Path Finder

Thanks for your response, but can you help me in understanding if we can use windows box for stream forwarders?

0 Karma

sduff_splunk
Splunk Employee
Splunk Employee

Splunk Stream is supported on Windows Server 2012R2 or later (64-bit)

https://docs.splunk.com/Documentation/StreamApp/7.1.2/DeployStreamApp/Deploymentrequirements#Support...

0 Karma

simon21
Path Finder

Thanks for your response, but can you help me in understanding if we can use windows box for stream forwarders?

0 Karma

sduff_splunk
Splunk Employee
Splunk Employee

Yes, you can use Windows Server 2012R2 or later for Stream Forwarders. Note the caveats listed here.

https://docs.splunk.com/Documentation/StreamApp/7.1.2/DeployStreamApp/InstallSplunkAppforStream#Wind...

0 Karma

simon21
Path Finder

Hi,

thanks for your reply. But according to teh below document, they have listed ilinux under the prerequisites. Can we still go ahead and use windows?

https://docs.splunk.com/Documentation/StreamApp/7.1.2/DeployStreamApp/InstallStreamForwarderonindepe...

0 Karma

sduff_splunk
Splunk Employee
Splunk Employee

That page refers to a Independent Stream forwarder, which is a standalone server for Splunk stream. In cases where you need to capture a very large amount of traffic, this might be suitable.
Otherwise, you can follow the process listed at https://docs.splunk.com/Documentation/StreamApp/7.1.2/DeployStreamApp/InstallSplunkAppforStream to install it on Windows or Linux,.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...