I know that a Universal Forwarder doesn't have a graphic user interface. But, does a HEAVY forwarder have a GUI?
Yes, Splunk Heavy Forwarder will have a web interface by default, unless it is disabled in /splunk/etc/system/web.conf
https://docs.splunk.com/Documentation/Splunk/8.1.2/Admin/Webconf
Hi @marsalistaylor,
Since Heavy Forwarder is actually Splunk Enterprise, it has GUI unless it is not disabled from web.conf.