Getting Data In

Splunk Heavy Forwarder

Vladimir
Path Finder

Hi,

Will Splunk support heavy forwarder in future or it's going to be decommitted?
I'm asking because there are only links to Splunk and SplunkUniversalForwarder in download section.

Thanks,
Vladimir

1 Solution

OL
Communicator

Splunk UF is way lighter and the only job it is (almost!) doing is forwarding the collected data the Splunk instance. There is no processing here. That's why it is less resource demanding.

Moreover, on the security point of view, the UF doesn't have a web UI and therefore you cannot unable it. This can be important in some cases.

Hope it helps.

Regards,
OL

View solution in original post

Vladimir
Path Finder

Thanks very much to all!

0 Karma

OL
Communicator

Splunk UF is way lighter and the only job it is (almost!) doing is forwarding the collected data the Splunk instance. There is no processing here. That's why it is less resource demanding.

Moreover, on the security point of view, the UF doesn't have a web UI and therefore you cannot unable it. This can be important in some cases.

Hope it helps.

Regards,
OL

Vladimir
Path Finder

So, in this case there is no advantages in using Splunk+SplunkUniversalForwarder instead of Splunk with configuring forwarding, right?

0 Karma

sseekamp
Explorer

Vladimir,

The heavy forwarder is just the full install of Splunk. There is no separate download for it.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...