forwarding license

noun

License for a forwarder, a Splunk instance that forwards data to another Splunk server or a third-party system. The forwarder is a smaller footprint version of Splunk with some features turned off, that functions as a lightweight, all-purpose agent.

Splunk offers several forwarder licensing options:

• The universal forwarder package includes its own license. The license is enabled/applied automatically; no additional steps are required post-installation. This license allows forwarding (but not indexing) of unlimited data, and also enables security on the forwarder so that users must supply username and password to access it.
• The light forwarder uses the same license as the universal forwarder. You can forward unlimited data and security is enabled on the light forwarder, but you cannot index any data.
• The heavy forwarder should have access to an Enterprise license stack if any indexing is to be performed on the forwarder, or if you want to enable authentication on the forwarder.

Forwarder licenses are included with Splunk; you do not have to purchase them separately. If you install a universal forwarder, the license is preinstalled.

Related forms

• forwarder

For more information

In the Admin Manual:

• Types of Splunk licenses, forwarder license
• Groups, stacks, pools, and other terminology

In the Distributed Deployment manual:

• About forwarding and receiving

• Alphabetical
• By Topic