Getting Data In

After enabling Universal Forwarder in Splunk 4.2, and restarting, it crashed?

rsimmons
Splunk Employee
Splunk Employee

When I enable Universal Forwarder in core Splunk 4.2, after restart, it crashed.

Tags (1)
1 Solution

zliu
Splunk Employee
Splunk Employee

For some reason, Splunk 4.2 shipped with Universal Forwarder app. This app should not be included with the core Splunk 4.2.

Please uninstall 4.2 and install it again. If you want to have Universal Forwarder, please download it and install it separately. This is an Known Issue in 4.2. SPL-39200

View solution in original post

zliu
Splunk Employee
Splunk Employee

For some reason, Splunk 4.2 shipped with Universal Forwarder app. This app should not be included with the core Splunk 4.2.

Please uninstall 4.2 and install it again. If you want to have Universal Forwarder, please download it and install it separately. This is an Known Issue in 4.2. SPL-39200

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...