C is the correct answer. Please check System Administrator official Splunk Course Slide 259.
"Universal Forwarders (UF)
• Gathers data from a host
• Sends data over the network to receiving
ports on receivers (usually an indexer)
• Provided as separate installation binary with
a built-in license (no limits)
• Designed to run on production servers
(minimal CPU / memory use, bandwidth constrained
to 256 KBps by default, no web interface, cannot
search or index)"
Universal forwarders have no license, they also don't transform any data. All data is sent directly to the indexer. Heavy Forwarders, on the other hand, require a licence, and when purchased it is inbuilt, oc.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
3bd8ac0
1 week, 4 days ago3bd8ac0
2 weeks, 2 days agoMonicaKarim
1 month agoimggnz
4 months agoinwigboji
11 months agokiranhar
1 year ago