The documentation shows that we need both a Heavy Forwarder for syslog and a collector. Can both roles be performed by the same Splunk heavy forwarder?
