Installation

old forwarder for Mac 10.4 w/ new Splunk 6 server

dant98
Engager

My organization just purchased splunk enterprise. I'm deploying to a diverse environment and a couple of my end points are MacOS 10.4. I know the current splunk forwarder only supports 10.7 and 10.8. Looking back it looks like splunk 3.4.13 was the last release to support 10.4. Is that what I would download and install for my legacy clients and would then properly forward to my Splunk 6 server?

Tags (2)

ShaneNewman
Motivator

That should be fine, we have 4.x forwarders sending to 6.0 indexers. I couldn't find any good documentation on compatibility between 3.x and 6.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...