https://community.splunk.com/t5/Deployment-Architecture/What-is-the-benefit-of-using-a-light-forwarder/m-p/44972#M1341 <P>The light forwarder on a Windows machine will allow you to easily capture all the metrics you could need, like Performance Metrics (CPU, Memory, Disk, Network), Windows Updates, Registry Changes, AD changes, etc. Installing the Windows app on the forwarder is also recommended, and it will ease configuration of capturing commonly-used data for Windows/AD monitoring.</P> <P>On the Unix indexer, the Windows app is not necessary to view the data. However, you will want to install the Windows app on the UNIX indexer, because it will allow you to view the Windows data using reports and dashboards that have already been made for common uses, like resource consumption charts, windows update status, failed logins, etc.</P> Tue, 15 Feb 2011 23:59:27 GMT Ron_Naken 2011-02-15T23:59:27Z https://community.splunk.com/t5/Deployment-Architecture/What-is-the-benefit-of-using-a-light-forwarder/m-p/44971#M1340 <P>I have a unix machine that is my main interface for splunk. </P> <P>I would like to index some windows machines. </P> <P>Why should I install a light forwarder on the windows machine as opposed to installing the windows app on the unix machine?</P> Tue, 15 Feb 2011 22:15:56 GMT https://community.splunk.com/t5/Deployment-Architecture/What-is-the-benefit-of-using-a-light-forwarder/m-p/44971#M1340 connorsvilardo 2011-02-15T22:15:56Z https://community.splunk.com/t5/Deployment-Architecture/What-is-the-benefit-of-using-a-light-forwarder/m-p/44972#M1341 <P>The light forwarder on a Windows machine will allow you to easily capture all the metrics you could need, like Performance Metrics (CPU, Memory, Disk, Network), Windows Updates, Registry Changes, AD changes, etc. Installing the Windows app on the forwarder is also recommended, and it will ease configuration of capturing commonly-used data for Windows/AD monitoring.</P> <P>On the Unix indexer, the Windows app is not necessary to view the data. However, you will want to install the Windows app on the UNIX indexer, because it will allow you to view the Windows data using reports and dashboards that have already been made for common uses, like resource consumption charts, windows update status, failed logins, etc.</P> Tue, 15 Feb 2011 23:59:27 GMT https://community.splunk.com/t5/Deployment-Architecture/What-is-the-benefit-of-using-a-light-forwarder/m-p/44972#M1341 Ron_Naken 2011-02-15T23:59:27Z