What is a Splunk Forwarder? What are the types of Splunk Forwarders?

Business & Management
1

The following are the two types of Splunk Forwarders:

  1. Universal Forwarder (UF): The Splunk agent installed on a non-Splunk system to gather data locally; it can’t parse or index data.
  2. Heavyweight Forwarder (HWF): A full instance of Splunk with advanced functionalities.