Which of the following Splunk components require a separate installation package?

The correct answer is C. Universal forwarder. The Universal Forwarder has its own dedicated installation package (separate from the standard Splunk Enterprise installer) because it is a stripped-down binary that does not include the full Splunk runtime, Python interpreter, or web interface. This keeps it small and suitable f

Splunk Forwarding

Question

Options

ADeployment server
BLicense master
CUniversal forwarder
DHeavy forwarder

How the community answered

(39 responses)

A
3% (1)
B
5% (2)
C
92% (36)

Explanation

The Universal Forwarder has its own dedicated installation package (separate from the standard Splunk Enterprise installer) because it is a stripped-down binary that does not include the full Splunk runtime, Python interpreter, or web interface. This keeps it small and suitable for deployment on endpoints. The Deployment Server (A), License Master (B), and Heavy Forwarder (D) are all roles that can be assigned to a standard Splunk Enterprise installation-no separate package is required. You simply install Splunk Enterprise and configure the instance to fulfill those roles.

Topics

#Splunk components#Universal forwarder#Installation packages#Forwarder types

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice