Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam SPLK-1003 topic 1 question 19 discussion

Actual exam question from Splunk's SPLK-1003
Question #: 19
Topic #: 1
[All SPLK-1003 Questions]

Which Splunk component requires a Forwarder license?

  • A. Search head
  • B. Heavy forwarder
  • C. Heaviest forwarder
  • D. Universal forwarder
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Reference:
https://answers.splunk.com/answers/70017/heavy-forwarder-costs-and-licenses.html

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
BMO
Highly Voted 2 years, 10 months ago
B is correct Data Admin - Slide 83 System Admin - Slide 42
upvoted 15 times
tjwe
2 years, 4 months ago
I agree, on system admin - slide 44 it says: Forwarder license: Sets the server up as a heavy forwarder.
upvoted 1 times
...
...
dpharker
Highly Voted 3 years, 6 months ago
This is a tricky question, because both HF and UF require a license, but the question asks which require a Forwarder License. The HF uses a Enterprise License to be able to parse or index data. The UF comes with a built-in license, but it is a license for forwarding. So when they ask which component requires a Forwarder License, it's the UF Correct answer is D.
upvoted 15 times
happy_and_lucky
3 years, 2 months ago
I think D too because https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses "***Universal forwarders only need a Forwarder license.*** If a heavy forwarder is performing additional functions such as indexing data or managing searches, it requires access to an Enterprise license."
upvoted 5 times
...
...
allahsal
Most Recent 4 weeks, 1 day ago
Selected Answer: B
Forwarder license • Sets the server up as a heavy forwarder • Applies to non-indexing forwarders • Allows authentication, but no indexing
upvoted 1 times
allahsal
4 weeks ago
I was wrong, the answer is D
upvoted 1 times
...
...
allahsal
4 weeks, 1 day ago
Selected Answer: D
https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses "***Universal forwarders only need a Forwarder license.***
upvoted 1 times
...
allahsal
4 weeks, 1 day ago
D is the correct answer. https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses "***Universal forwarders only need a Forwarder license.***
upvoted 1 times
...
Vidomina
4 weeks, 1 day ago
Selected Answer: D
I should be D. The universal forwarder has the Forwarder license applied automatically. Heavy Forwarder has Enterprise or Forwarder license
upvoted 1 times
...
bobixaka
4 months, 3 weeks ago
Selected Answer: D
HF requires Enterprise License UF comes with a free "Forwarding License"
upvoted 3 times
...
emlch
1 year, 6 months ago
Selected Answer: B
The HF Requires a Splunk Enterprise Instance with the Forwarder License enabled. The UF is provided as separate installation with a built-in license
upvoted 2 times
...
MxQ3
1 year, 8 months ago
Heavy Forwarder for sure
upvoted 1 times
...
Apis
2 years, 2 months ago
Selected Answer: B
B is correct
upvoted 1 times
...
gabo1969
2 years, 3 months ago
UF Don´t require licence to work
upvoted 1 times
...
inwigboji
2 years, 5 months ago
Correct answer is B. UF already has an inbuilt FL and won't require it. HF need manual configuration to use FL
upvoted 1 times
...
not_another_user_007
2 years, 6 months ago
This question is worded wrong. It should be asking which forwarding component requires it's own licence. The answer then would be D UF. The HF uses pool licence (ie enterprise licence). This question is also covered in Splunk Architect. I would go D UF
upvoted 3 times
...
loky0
2 years, 7 months ago
It's B. See P42 on the latest Sys Admin pdf or P67 on the Data Admin pdf. "Forwarder License sets the server up as heavy forwarder"
upvoted 2 times
...
gsplunker
3 years, 1 month ago
It should be B as • Forwarder license – Sets the server up as a heavy forwarder – Applies to non-indexing forwarders – Allows authentication, but no indexing
upvoted 5 times
...
amsinha
3 years, 1 month ago
UF is the answer. refer to this: https://docs.splunk.com/Splexicon:Forwardinglicense The universal forwarder package includes its own license. The license is enabled or applied automatically. This license allows forwarding but not indexing of unlimited data, and also enables security on the forwarder so that users must supply a user name and password to access it. The heavy forwarder should have access to an Enterprise license stack if you plan to perform indexing on the forwarder or to enable authentication on the forwarder. The light forwarder uses the same license as the universal forwarder. The light forwarder has been deprecated in Splunk Enterprise 6.2.0.
upvoted 2 times
...
sargeholik
3 years, 2 months ago
pag 47 data admin, heavy forwarder is correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...