Which Splunk indexer operating system platform is supported when sending logs from a Windows universal forwarder?

The correct answer is A. Any OS platform. A Windows Universal Forwarder can send data to a Splunk indexer running on ANY operating system platform (Linux, Windows, macOS, etc.). The forwarder and indexer communicate over Splunk's proprietary protocol (typically TCP port 9997), which is OS-agnostic. The operating system o

Splunk Forwarding

Question

Options

AAny OS platform
BLinux platform only
CWindows platform only.
DNone of the above.

How the community answered

(18 responses)

A
89% (16)
B
6% (1)
D
6% (1)

Explanation

A Windows Universal Forwarder can send data to a Splunk indexer running on ANY operating system platform (Linux, Windows, macOS, etc.). The forwarder and indexer communicate over Splunk's proprietary protocol (typically TCP port 9997), which is OS-agnostic. The operating system of the forwarder and the operating system of the indexer are completely independent. This cross-platform flexibility is a core design feature of Splunk's distributed architecture, allowing organizations to collect data from Windows endpoints and forward it to Linux-based indexers, or any other OS combination.

Topics

#Universal Forwarder#Indexer#OS compatibility#Log forwarding

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice