All Apps and Add-ons

What are the factors on which we decide when to use universal or heavy forwarders?

abhi04
Communicator

What are the factors on which we can decide if we can use universal or heavy forwarders?
Can we use only universal forwarders on application servers?
Can we use only heavy forwarders on application servers?
Can we use both and universal and heavy forwarders and what can be the architecture in this case?
The above is for prod environment where we have 3 data centre?

0 Karma
1 Solution

mayurr98
Super Champion

hey your questions are well answered in this blog

have a look at it.
https://www.splunk.com/blog/2016/12/12/universal-or-heavy-that-is-the-question.html

let me know if this helps!

View solution in original post

0 Karma

mayurr98
Super Champion

hey your questions are well answered in this blog

have a look at it.
https://www.splunk.com/blog/2016/12/12/universal-or-heavy-that-is-the-question.html

let me know if this helps!

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...