It's necessary to declare some info into the inputs.conf file too.
Example: https://answers.splunk.com/answers/143771/whats-the-trick-to-get-unarchive-cmd-to-work-for-a-custom-archive-format.html
... View more
you won't be able to search anything in your Heavy forwarder. As the name implies, it's a forwarder which basically has two functions: Forward the data to an Index/another Heavy Forwarder or even an UF OR ingest data.
In other words, you cannot perform any search against your HF.
... View more