What are the factors on which we can decide if we can use universal or heavy forwarders?
Can we use only universal forwarders on application servers?
Can we use only heavy forwarders on application servers?
Can we use both and universal and heavy forwarders and what can be the architecture in this case?
The above is for prod environment where we have 3 data centre?
hey your questions are well answered in this blog
have a look at it.
https://www.splunk.com/blog/2016/12/12/universal-or-heavy-that-is-the-question.html
let me know if this helps!
hey your questions are well answered in this blog
have a look at it.
https://www.splunk.com/blog/2016/12/12/universal-or-heavy-that-is-the-question.html
let me know if this helps!