Splunk Universal Forwarder

This is to announce the availability of the Splunk Universal Forwarder for Windows. This version of the Universal Forwarder now matches that of the Splunk infrastructure which was recently updated.


The Splunk Universal Forwarder is deployed to AUTO software groups in Active Directory.

<DEPT>-SW-Splunk-Universal Forwarder-AUTO
<DEPT>-SW-Splunk-Universal Forwarder-AUTO-SS

Your software groups are located at:

NCSU/<DEPT>/Software Packages/NCSU Software/

On Monday, May 23, the required and available deployments to the AUTO software groups for version will be deleted and required and available deployments for version created.

The deadline for the required deployment will be scheduled for Monday, June 6, 6:00pm Eastern. Configured with a deadline, the required deployment will not automatically install until the deadline is reached, giving admins time to initiate an install of the new version from Software Center to test at a time that is convenient.

Who’s Affected

Computers that are members of the required NCSU-SW-Splunk-Universal Forwarder-AUTO or available NCSU-SW-Splunk-Universal Forwarder-AUTO-SS groups in Active Directory will be targeted for this upgrade.

A restart is not needed for this application and one is not forced.

If you have questions or are in need of assistance, please email activedirectory_packaging@help.ncsu.edu.