Deployment Architecture

How to install Heavy forwarder and how to configure it in Search header

javvaji
New Member

How to download and install Heavy forwarder and how to configure heavy forwarder in Search header server

Tags (1)
0 Karma

tibevilaqua
Engager

you won't be able to search anything in your Heavy forwarder. As the name implies, it's a forwarder which basically has two functions: Forward the data to an Index/another Heavy Forwarder or even an UF OR ingest data.

In other words, you cannot perform any search against your HF.

0 Karma

dperre_splunk
Splunk Employee
Splunk Employee

Hi There,

What are you trying to achieve? Do you want to be able to search from the Heavy Forwarder? Is the heavy forwarder storing any data or just sending a long? Or would you like to search the contents of the heavy forwarder from another search head?

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Basic docs are here: Deploy a heavy forwarder.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...