product
- Why choose Splunk
- Installation record
- price
- Splunk Enterprise Security
- Splunk Phantom (SOAR)
- Splunk ITSI (Next Generation IT Operations)
- Splunk Observability Cloud
- Splunk UBA
- Macnica CSIRT App Basic
- App for Splunk for Financial Institutions
- Splunk Analytics for Hadoop
- About Apps
- Splunk Edge Hub
- What is Splunk
service
- Dashboard/SPL Creation Pack [Implementation/Building Support]
- Version upgrade service [implementation and construction support]
- Smart Security Monitoring App [Original App/Service]
- Splunk × LANSCOPE Original App [Original App/Service]
- Security Monitoring App for Box [Original App/Service]
- Cloud Security Monitoring App [Original App/Service]
- List of services
- Macnica Premium Support for Splunk (utilization support, version upgrade monitoring)
Specifications/Technical Information
Application for evaluation machine
- FAQ
What is the difference between Universal Forwarder and Heavy Forwarder?
The Universal Forwarder and Heavy Forwarder installers are different.
Universal Forwarder will be a smaller installer with specialized features for collecting and forwarding data, while Heavy Forwarder will be the same installer as regular indexing servers.
If you want to mask some data during forwarding or perform advanced filtering, you need to use Heavy Forwarder.
For simple data collection and transfer, we recommend using Universal Forwarder.
In addition, there is a description about the difference of each forwarder below, so please refer to it.
http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/TypesofforwardersIn charge of Macnica Splunk Co., Ltd.
- TEL:045-476-2010
- E-mail:splunk-sales@macnica.co.jp
Weekdays: 9:00-17:00