Exam SPLK-1003 topic 1 question 19 discussion

This is a tricky question, because both HF and UF require a license, but the question asks which require a Forwarder License. The HF uses a Enterprise License to be able to parse or index data. The UF comes with a built-in license, but it is a license for forwarding. So when they ask which component requires a Forwarder License, it's the UF Correct answer is D.

B is correct Data Admin - Slide 83 System Admin - Slide 42

In both the Ent Admin and Data Admin slide decks, any reference to the phrase "Forwarder License", is attached to comment about the HF not the UF. Answer B.

Correct answer seems to be B, a Forwarding License is a license for a forwarder, which is a Splunk Enterprise instance that forwards data to another Splunk Enterprise server or to a third-party system. In this case the HF is a Splunk Enterprise instance forwarding data, "The heavy forwarder should have access to an Enterprise license stack if you plan to perform indexing on the forwarder or to enable authentication on the forwarder." A "stack" is a collection of licenses, meaning that the forwarding license is required and included in the stack

D is correct, as the documentation provided below says, ¨Universal forwarders only need a Forwarder license. If a heavy forwarder is performing additional functions such as indexing data or managing searches, it requires access to an Enterprise license.¨ https://docs.splunk.com/Documentation/Splunk/9.3.1/Admin/Distdeploylicenses#:~:text=Universal%20forwarders%20only%20need%20a,access%20to%20an%20Enterprise%20license.

Correct answer is D. A Heavy Forwarder uses an Enterprise license

Forwarder license • Sets the server up as a heavy forwarder • Applies to non-indexing forwarders • Allows authentication, but no indexing

https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses "***Universal forwarders only need a Forwarder license.***

D is the correct answer. https://docs.splunk.com/Documentation/Splunk/8.0.1/Admin/Distdeploylicenses "***Universal forwarders only need a Forwarder license.***

I should be D. The universal forwarder has the Forwarder license applied automatically. Heavy Forwarder has Enterprise or Forwarder license

HF requires Enterprise License UF comes with a free "Forwarding License"

The HF Requires a Splunk Enterprise Instance with the Forwarder License enabled. The UF is provided as separate installation with a built-in license

Heavy Forwarder for sure

B is correct

UF Don´t require licence to work

Correct answer is B. UF already has an inbuilt FL and won't require it. HF need manual configuration to use FL

This question is worded wrong. It should be asking which forwarding component requires it's own licence. The answer then would be D UF. The HF uses pool licence (ie enterprise licence). This question is also covered in Splunk Architect. I would go D UF