In this screencast, one of Hurricane Labs’ Splunk Administrators and Security Operations Analysts, Jeremy Nenadal walks you through a “How-To” for turning a Universal Forwarder into a Heavy Forwarder in Splunk. Performing this upgrade can be beneficial to your organization for a variety of reasons.
You may want to perform this migration because:
- A universal forwarder may not be able to fulfill the needs of your growing organization
- A software you’re installing may require a heavy forwarder with the additional features a universal forwarder lacks
Watch the screencast tutorial below for the full details of how to perform this upgrade.