Installation overview
To deploy the universal forwarder:
- Make sure you fulfill the necessary prerequisites. See Universal forwarder prerequisites.
- Install the universal forwarder:
- For Windows, see Install a Windows universal forwarder.
- For *nix, see Install a *nix universal forwarder.
- To send data to Splunk Enterprise, enable a Splunk Enterprise indexer receiver. See Enable a receiver for Splunk Enterprise.
- To send data to Splunk Cloud Platform, you must obtain permissions to use the Splunk Cloud indexer. See Install and configure the Splunk Cloud Platform universal forwarder credentials package.
- (Optional) To further modify how data is sent to the indexer, configure the universal forwarder. See Configure the universal forwarder using configuration files.
- Start or restart the universal forwarder. See Start or stop the universal forwarder.