Video Series — Splunk Basics (Splunk for Security)
The Universal Forwarder (UF)
and Heavy Forwarder (HF)
Video Summary
During your first experiments with Splunk, you may come across the term 'data forwarding' and wonder what exactly that means. In a typical Splunk environment, there is often data coming in from a range of sources that need formatting before sending to Splunk for processing - this is where data forwarding comes in.
On that note, one particularly important aspect of any Splunk deployment is the use of forwarders and indexers. There are a number of different forwarders that can be used, including Universal Forwarder (UF), Heavy Forwarder (HF), and Intermediate Forwarder (IF). In this educational clip, our certified expert, Oliver Knapp, explains how Universal Forwarders and Heavy Forwarders allow for reliable, secure data collection from remote sources, before forwarding that data into Splunk software.
This episode is the first of many that will guide you through the basic concepts you'll uncover as you begin your Splunk journey.
Other Videos You Might Like
