We are about to upgrade several hundred Universal Forwarders (UF) in our environment. We want to make sure that any logs that were generated during the upgrade of the UF would not be lost or duplicated. I did find info on `current_only`, however it seem this is only for the ***Windows Event Log Monitor***, and not the ***MONITOR:***.
Is there anything we need to make sure we have in place?
How will the UF know where the old version left off?
I have tried to look this up, but with all the posts just named *Universal Forwarder*, I could have overlooked if this has been asked before.
↧