in Technology by (1.9m points)

What is a Splunk Forwarder? What are the types of Splunk Forwarders?

1 Answer

0 votes
by (1.9m points)
There are two types of Splunk Forwarders as below:

Universal Forwarder (UF): The Splunk agent installed on a non-Splunk system to gather data locally; it can’t parse or index data.
Heavyweight Forwarder (HWF): A full instance of Splunk with advanced functionalities.
It generally works as a remote collector, intermediate forwarder, and possible data filter, and since it parses data, it is not recommended for production systems.