Universal forwarder deployment prerequisites
Before you can deploy the universal forwarder, see the following universal forwarder prerequisites sections:
Decide if you want to use the Splunk deployment server
To personalize how data is sent to the indexer, you edit the universal forwarder's configuration files. Through the deployment server, you can edit multiple universal forwarders at once by manually editing a single file. See About deployment server and forwarder management in the Updating Splunk Enterprise Instances manual.
Computer hardware requirements
The universal forwarder has the following minimum processing, RAM, and disk space requirements:
| Component | Required space |
|---|---|
| Processing | 1.5Ghz |
| RAM | 512MB |
| Free Disk Space | 5GB |
Compatible operating systems
For compatible operating systems, see Supported operating systems in the Splunk Enterprise Installation manual.