SPLK-1003 · Question #176
The universal forwarder has which capabilities when sending data? (select all that apply)
The correct answer is B. Compressing data D. Indexer acknowledgement. Universal Forwarders (UF) are lightweight agents with a minimal feature set. They support data compression (B) - UFs can compress data before transmitting it to indexers to reduce network bandwidth. They also support indexer acknowledgement (D) - a reliability feature where the…
Question
The universal forwarder has which capabilities when sending data? (select all that apply)
Options
- ASending alerts
- BCompressing data
- CObfuscating/hiding data
- DIndexer acknowledgement
How the community answered
(31 responses)- A3% (1)
- B94% (29)
- C3% (1)
Explanation
Universal Forwarders (UF) are lightweight agents with a minimal feature set. They support data compression (B) - UFs can compress data before transmitting it to indexers to reduce network bandwidth. They also support indexer acknowledgement (D) - a reliability feature where the indexer confirms receipt of data before the forwarder removes it from its queue, preventing data loss. UFs cannot send alerts (A) because alerts require search-time processing, which UFs do not perform. UFs cannot obfuscate or mask data (C) because that requires event parsing/transformation capabilities only available in Heavy Forwarders.
Topics
Community Discussion
No community discussion yet for this question.