O'Reilly logo

Splunk 7 Essentials - Third Edition by Betsy Page Sigman, Erickson Delgado, J-P Contreras

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Heavy forwarder

A Splunk heavy forwarder is a full Splunk Enterprise instance; however, some functionality is disabled. Different to the universal forwarder, a heavy forwarder parses data before forwarding it, which can be of help in complex data environments. A heavy forwarder can also direct data to different indexes in different locations, based on data contained with the event, such as the source IP address or kind of event. Since the heavy forwarder is almost a fully functional Splunk instance, it can index data locally, while also forwarding the data to another index peer.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required