Download Splunk Universal Forwarder

The Universal Forwarder is a dedicated Splunk package used wherever data needs to be collected directly from endpoints. Forwarders are lightweight, secure and can be deployed to provide real-time data collection from tens of thousands of sources. Use the Universal Forwarder to monitor local application logfiles, capture the output of status commands on a schedule, grab performance metrics from virtual or non-virtual sources or watch the file system for configuration, permissions and attribute changes.

Questions? Ask a Splunk Expert.

Platform Version Installer Notes
Windows Vista, 7, and 8 (64-bit)
Windows Server 2003, 2003 R2, 2008, 2008 R2, and 2012 (64-bit)
6.0.3
splunk-6.0.3-204106-x64-release.msi
splunkforwarder-6.0.3-204106-x64-release.msi
Release Notes
Windows Vista, 7, and 8 (32-bit)
Windows Server 2003, 2003 R2, 2008, and 2008 R2 (32-bit)
6.0.3
splunk-6.0.3-204106-x86-release.msi
splunkforwarder-6.0.3-204106-x86-release.msi
Release Notes
2.6+ kernel Linux distributions (64-bit) 6.0.3
splunk-6.0.3-204106-Linux-x86_64.tgz
splunk-6.0.3-204106-linux-2.6-amd64.deb
splunk-6.0.3-204106-linux-2.6-x86_64.rpm
splunkforwarder-6.0.3-204106-Linux-x86_64.tgz
splunkforwarder-6.0.3-204106-linux-2.6-amd64.deb
splunkforwarder-6.0.3-204106-linux-2.6-x86_64.rpm
Release Notes
2.6+ kernel Linux distributions (32-bit) 6.0.3
splunk-6.0.3-204106-Linux-i686.tgz
splunk-6.0.3-204106-linux-2.6-intel.deb
splunk-6.0.3-204106.i386.rpm
splunkforwarder-6.0.3-204106-Linux-i686.tgz
splunkforwarder-6.0.3-204106-linux-2.6-intel.deb
splunkforwarder-6.0.3-204106.i386.rpm
Release Notes
PowerLinux 2.6+ kernel Linux distributions 6.0.3
splunkforwarder-6.0.3-204106-linux-2.6-ppc64.rpm
Release Notes
Solaris 10, 11 (64-bit) 6.0.3
splunk-6.0.3-204106-SunOS-x86_64.tar.Z
splunk-6.0.3-204106-solaris-10-intel.pkg.Z
splunkforwarder-6.0.3-204106-SunOS-x86_64.tar.Z
splunkforwarder-6.0.3-204106-solaris-10-intel.pkg.Z
Release Notes
Solaris 10 (32-bit) 6.0.3
splunk-6.0.3-204106-SunOS-i386.tar.Z
splunk-6.0.3-204106-solaris-9-intel.pkg.Z
splunkforwarder-6.0.3-204106-SunOS-i386.tar.Z
splunkforwarder-6.0.3-204106-solaris-9-intel.pkg.Z
Release Notes
Solaris 10, 11 (SPARC) 6.0.3
splunk-6.0.3-204106-SunOS-sparc.tar.Z
splunk-6.0.3-204106-solaris-8-sparc.pkg.Z
splunkforwarder-6.0.3-204106-SunOS-sparc.tar.Z
splunkforwarder-6.0.3-204106-solaris-8-sparc.pkg.Z
Release Notes
OSX 10.7 (Intel)
OSX 10.8 (Intel)
6.0.2
splunkforwarder-6.0.2-196940-macosx-10.7-intel.dmg
splunkforwarder-6.0.2-196940-darwin-64.tgz
Release Notes
OSX 10.7 (Intel)
OSX 10.8 (Intel)
6.0.3
splunk-6.0.3-204106-macosx-10.7-intel.dmg
splunk-6.0.3-204106-darwin-64.tgz
splunkforwarder-6.0.3-204106-darwin-64.tgz
splunkforwarder-6.0.3-204106-macosx-10.7-intel.dmg
Release Notes
FreeBSD 7, 8, and 9 (64-bit)
(freebsd-7.3 is a native package)
6.0.3
splunk-6.0.3-204106-FreeBSD7-amd64.tgz
splunk-6.0.3-204106-freebsd-7.3-amd64.tgz
splunkforwarder-6.0.3-204106-FreeBSD7-amd64.tgz
splunkforwarder-6.0.3-204106-freebsd-7.3-amd64.tgz
Release Notes
FreeBSD 7, 8, and 9 (32-bit)
(Intel is a native package)
6.0.3
splunk-6.0.3-204106-FreeBSD7-i386.tgz
splunk-6.0.3-204106-freebsd-7.3-intel.tgz
splunkforwarder-6.0.3-204106-FreeBSD7-i386.tgz
splunkforwarder-6.0.3-204106-freebsd-7.3-intel.tgz
Release Notes
AIX 6.1, 7.1 6.0.3
splunk-6.0.3-204106-AIX-powerpc.tgz
splunkforwarder-6.0.3-204106-AIX-powerpc.tgz
Release Notes
HP-UX 11i v2 (11.22 PA-RISC)
HP-UX 11i v3 (11.31 PA-RISC)
6.0.3
splunk-6.0.3-204106-HPUX-PARISC.tgz
splunkforwarder-6.0.3-204106-HPUX-PARISC.tgz
Release Notes
HP-UX 11i v2 (11.22 Itanium)
HP-UX 11i v3 (11.31 Itanium)
6.0.3
splunk-6.0.3-204106-HPUX-ia64.tgz
splunkforwarder-6.0.3-204106-HPUX-ia64.tgz
Release Notes