Deployment Architecture

How to install Heavy forwarder and how to configure it in Search header

javvaji
New Member

How to download and install Heavy forwarder and how to configure heavy forwarder in Search header server

Tags (1)
0 Karma

tibevilaqua
Engager

you won't be able to search anything in your Heavy forwarder. As the name implies, it's a forwarder which basically has two functions: Forward the data to an Index/another Heavy Forwarder or even an UF OR ingest data.

In other words, you cannot perform any search against your HF.

0 Karma

dperre_splunk
Splunk Employee
Splunk Employee

Hi There,

What are you trying to achieve? Do you want to be able to search from the Heavy Forwarder? Is the heavy forwarder storing any data or just sending a long? Or would you like to search the contents of the heavy forwarder from another search head?

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Basic docs are here: Deploy a heavy forwarder.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...