topic Re: Agent vrs Forwarder? in Getting Data In

Agent vrs Forwarder?

rayjsplunk — Wed, 23 Mar 2011 21:08:58 GMT

Is a Splunk Agent the same as a Splunk Forwarder?

Thanks,

Ray

Re: Agent vrs Forwarder?

dwaddle — Wed, 23 Mar 2011 21:42:51 GMT

Basically yes. Splunk does not refer to anything as an "agent" - that is terminology borrowed from other systems.

But, similar to an agent, a Splunk forwarder installs on many "client" systems (who may be "servers" themselves [web,ftp,mysql] , but they are not "servers" in the Splunk application sense).

Until 4.2, the same install package is used no matter what role a machine is playing (forwarder, indexer, search head). With 4.2, and the Universal forwarder, the packaging is much more like the traditional "server install" versus "agent install"

Re: Agent vrs Forwarder?

Rayj00 — Wed, 23 Mar 2011 22:03:13 GMT

Thanks for clearing that up!

Re: Agent vrs Forwarder?

dwaddle — Wed, 23 Mar 2011 22:05:31 GMT

You're welcome - please click the green checkbox next to the answer to "accept" it and mark this question as resolved.